Trend Micro Apex One vulnerabilities
7 known CVE vulnerabilities in Trend Micro Apex One, translated and rated.
- CVE-2026-34926MediumActively exploited
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents. The attack requires access to the server and prior administrative credentials.
- CVE-2025-71211Critical
A vulnerability in the Trend Micro Apex One management console (similar to CVE-2025-71210 but affecting a different executable) allows a remote attacker to upload malicious code and execute commands. Requires access to the management console. SaaS versions are already patched.
- CVE-2025-71210Critical
A vulnerability in the Trend Micro Apex One management console allows a remote attacker to upload malicious code and execute commands. Requires access to the management console. SaaS versions are already patched.
- CVE-2025-71216High
Time-of-check time-of-use vulnerability in Trend Micro Apex One (Mac) agent cache mechanism allows local attacker to escalate privileges. Requires prior low-privileged code execution. Patches available in ActiveUpdate/SaaS updates from mid/late 2025.
- CVE-2025-71214High
An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system.
- CVE-2025-71213High
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system.
- CVE-2025-71212High
Trend Micro Apex One has a link following vulnerability in the scan engine that could allow a local attacker to escalate privileges. The attacker must first have the ability to execute low-privileged code.