Apex One EUVD-2025-209912

Exploitation requires the attacker to already have the ability to execute low-privileged code locally on a macOS host running the Trend Micro Apex One (mac) agent (per CVSS AV:L and PR:L, and the description's explicit prerequisite). The specific target is the agent's iCore service, whose insufficient origin validation is what permits a local unprivileged process to be accepted as a trusted requester. Limiting factors: it is not remotely exploitable, requires no user interaction but does require prior local access with at least low privileges, is confined to the macOS agent, and is not automatable per CISA SSVC - meaning each compromise needs an existing per-host foothold rather than scalable remote attack.

The signals are consistent and point to a real but constrained local-privilege-escalation risk rather than a mass-exploitation emergency. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms local attack vector with low complexity and requiring existing low-level privileges, matching the description's statement that the attacker must first execute low-privileged code. CISA SSVC aligns: Exploitation 'none', Automatable 'no' (a local foothold cannot be trivially scaled), but Technical Impact 'total' - full compromise once triggered. EPSS is essentially zero (0.01%, 1st percentile) and the CVE is not in CISA KEV, so widespread or active exploitation is not indicated. The one elevating factor is the ZDI advisory (ZDI-26-139), which shows credible researcher analysis, though a ZDI listing is not the same as a public POC. Net: prioritize as a standard local EoP on managed macOS fleets, not an internet-facing critical.

An attacker gains an initial low-privileged foothold on a managed Mac - for example via a phishing payload, a compromised user account, or a separate app vulnerability - then runs a local process that sends crafted requests to the Apex One (mac) iCore service. By exploiting the origin validation flaw, the process is treated as a trusted caller and abuses the service's privileges to escalate to full control of the host. No public exploit is identified, though ZDI (ZDI-26-139) analyzed the issue.