Trend Micro Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Trend Micro Apex One Security Agent contains a privilege escalation vulnerability (CVE-2025-71216) that allows local attackers with low-privileged code execution to gain elevated system permissions. An attacker who already has basic access to an affected system can leverage this flaw to escalate their privileges and potentially take full control of the machine. Security teams should prioritize patching Trend Micro Apex One Security Agent installations immediately and review systems for unauthorized privilege escalation attempts, particularly focusing on accounts with limited access that may have been compromised.