ZDI-26-138 HIGH 7.8 Published Mar 03, 2026

Trend Micro Apex One Virus Scan Engine Link Following Local Privilege Escalation Vulnerability

Trend

Trend Micro Apex One Security Agent contains a privilege escalation vulnerability (CVE-2025-71212) that allows attackers with low-level code execution on a system to gain elevated privileges. This high-severity flaw (CVSS 7.8) significantly increases the potential impact of local compromises by enabling attackers to move from restricted to administrative access. Security teams should prioritize patching this vulnerability and review systems where low-privileged code execution may already be possible, as this represents a common multi-stage attack pathway.

Related CVE

CVE-2025-71212

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy