ZDI-26-143
HIGH 7.8
Published
Mar 03, 2026
Trend Micro Apex One Security Agent TmSelfProtect Origin Validation Error Local Privilege Escalation Vulnerability
Trend
This advisory describes a privilege escalation vulnerability in Trend Micro Apex One Security Agent that allows an attacker with low-privileged code execution to gain elevated system permissions. An attacker would need to already have basic access to the target system, but could then leverage this flaw to obtain administrator-level control. Security teams should prioritize patching Trend Micro Apex One installations and review system access logs for any suspicious low-privilege code execution that could indicate exploitation attempts.