Trend Micro Apex One CVE-2026-45206

Exploitation requires the attacker to already be running code as a low-privileged local user on a Windows endpoint that has a vulnerable Apex One agent installed (Apex One 2019 build below 14.0.0.17079, or Apex One as a Service agent below 14.0.20731) and where the affected process-protection IPC mechanism is enabled - which is the default for the agent's self-protection feature. No user interaction, no network exposure, and no elevated privileges are needed beyond that initial foothold, but the attack is strictly local: it cannot be triggered remotely, it does not work against endpoints already patched to the fixed builds, and it is moot on hosts where untrusted local code execution is already prevented by application allowlisting or kiosk-mode restrictions.

The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H scores 7.8 and accurately reflects a local, low-complexity escalation that needs an existing low-privileged foothold but no user interaction, yielding full confidentiality, integrity, and availability impact on the host. There is no EPSS score and no SSVC decision metadata provided, the CVE is not listed in CISA KEV, and no public proof-of-concept is referenced, so prioritization should be driven by exposure (number of endpoints running vulnerable agents) rather than imminent mass exploitation. The signals are consistent: local-only vector, vendor-discovered, patch already released - characteristic of a defense-in-depth fix rather than an emergency, but it is still attractive to attackers as a post-compromise step on hardened endpoints and to malware seeking to neutralize the EDR itself, so patching should be prioritized on workstations and shared servers where untrusted code execution is plausible.

An attacker who has already landed code as a standard user - via phishing, a browser exploit, or a malicious dependency - runs a small helper that opens the vulnerable Apex One IPC channel and forges the origin metadata so the privileged agent service treats it as a trusted Trend Micro component. The agent then performs a privileged action on the attacker's behalf (loading a DLL, writing to a protected path, or disabling protection), giving the attacker SYSTEM-level control and effectively neutralizing the EDR on that host. No public exploit identified at time of analysis, but the local/low-complexity profile makes weaponization straightforward once the IPC handshake is reverse-engineered.