TrendAI Apex One as a Service vulnerabilities
12 known vulnerabilities in TrendAI Apex One as a Service from Trend Micro. 11 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
TrendAI Apex One: Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in ord
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an attacker must
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note: an attac
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to e
- 6.7 Medium severity
Trend Micro Apex One (On-Premise) Directory Traversal Exploited
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploi
- 7.8 High severity
TrendAI Apex One: Origin Validation Error
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order
- 7.8 High severity
TrendAI Apex One: Improper Link Resolution Before File Access
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in
- 9.8 Critical severity
TrendAI Apex One: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. P
- 9.8 Critical severity
TrendAI Apex One: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was re