CVE-2025-69258
CRITICALCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Tags
Description
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
Analysis
Trend Micro Apex Central has a DLL loading vulnerability (LoadLibraryEX) that allows unauthenticated remote attackers to load attacker-controlled DLLs and execute code as SYSTEM. PoC available.
Technical Context
A LoadLibraryEX call in Apex Central loads a DLL from an attacker-controllable path (CWE-120 as classified, but functionally a DLL hijacking vulnerability). The code executes under the SYSTEM account, providing maximum privilege. This is a security management console – compromise gives control over the entire Trend Micro deployment.
Affected Products
Trend Micro Apex Central
Remediation
Apply Trend Micro patches immediately. Restrict network access to Apex Central. Monitor for DLL loading anomalies.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today