Apex One vulnerabilities
98 known vulnerabilities in Apex One from Trend Micro. 97 are rated high or critical, and 11 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
TrendAI Apex One: Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in ord
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an attacker must
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note: an attac
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to e
- 6.7 Medium severity
Trend Micro Apex One (On-Premise) Directory Traversal Exploited
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploi
- 7.8 High severity
TrendAI Apex One (Mac): Origin Validation Error
An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-priv
- 7.8 High severity
TrendAI Apex One (Mac): Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged co
- 7.0 High severity
TrendAI Apex One (Mac): Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to exec
- 7.8 High severity
TrendAI Apex One (Mac): Origin Validation Error
An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order
- 7.8 High severity
TrendAI Apex One: Improper Link Resolution Before File Access
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in
- 9.8 Critical severity
TrendAI Apex One: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. P
- 9.8 Critical severity
TrendAI Apex One: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was re
- 9.8 Critical severity
Trend Micro Apex One: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but ta
- 9.8 Critical severity
Trend Micro Apex One OS Command Injection Exploited
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
- 7.8 High severity
Trend Micro Apex One: Uncontrolled Search Path Element
An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the t
- 7.8 High severity
Trend Micro Apex One: Improper Link Resolution Before File Access
A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the targe
- 7.8 High severity
Trend Micro Apex One: Improper Link Resolution Before File Access
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system i
- 8.8 High severity
Trend Micro Apex One: Uncontrolled Search Path Element
An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.
- 7.8 High severity
Trend Micro Apex One: Improper Access Control
An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected
- 7.8 High severity
Trend Micro Apex One: Incorrect User Management
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. This CVE address an addtional bypass not covered in CVE-202
- 7.8 High severity
Trend Micro Apex One: Improper Privilege Management
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to e
- 7.8 High severity
Trend Micro Apex One: Origin Validation Error
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order
- 7.8 High severity
Trend Micro Apex One: Improper Privilege Management
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in o
- 7.8 High severity
Trend Micro Apex One: Improper Privilege Management
An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to
- 7.8 High severity
Trend Micro Apex One: Improper Link Resolution Before File Access
A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system
- 7.8 High severity
Trend Micro Apex One: Incorrect Privilege Assignment
A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This vulnerability is similar to, but not identical to CVE-2024-52048. Please note: an attacker must first obtain th
- 7.8 High severity
Trend Micro Apex One: Incorrect Privilege Assignment
A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This vulnerability is similar to, but not identical to CVE-2024-52049. Please note: an attacker must first obtain th
- 8.8 High severity
Trend Micro Apex One: Files or Directories Accessible to External Parties
A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in
- 7.5 High severity
Trend Micro Apex One: Improper Neutralization of Special Elements used in an SQL Command
An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in orde
- 7.8 High severity
Trend Micro Apex One: Improper Access Control
An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order
- 7.8 High severity
Trend Micro Apex One: Improper Link Resolution Before File Access
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in o
- 7.0 High severity
Trend Micro Apex One: Time-of-check Time-of-use (TOCTOU) Race Condition
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privilege
- 7.8 High severity
Trend Micro Apex One: Origin Validation Error
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target sys
- 7.8 High severity
Trend Micro Apex One: Origin Validation Error
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target sys
- 7.8 High severity
Trend Micro Apex One: Improper Link Resolution Before File Access
An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privilege escalation on affected installations. Please note: an attacker must first o
- 7.8 High severity
Trend Micro Apex One: Improper Privilege Management
An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target sys