ZDI-26-139 HIGH 7.8 Published Mar 03, 2026

Trend Micro Apex One Security Agent iCore Service Origin Validation Error Local Privilege Escalation Vulnerability

Trend

Trend Micro Apex One Security Agent contains a privilege escalation vulnerability (CVE-2025-71214) that allows local attackers with low-privileged code execution to gain elevated system permissions. An attacker exploiting this flaw could obtain administrative or system-level access to compromise the security posture of affected endpoints. Security teams should prioritize patching Trend Micro Apex One installations and review access controls to limit low-privilege code execution risks on vulnerable systems.

Related CVE

CVE-2025-71214

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy