ZDI-26-143 HIGH 7.8 Published Mar 03, 2026

Trend Micro Apex One Security Agent TmSelfProtect Origin Validation Error Local Privilege Escalation Vulnerability

Trend

This advisory describes a privilege escalation vulnerability in Trend Micro Apex One Security Agent that allows an attacker with low-privileged code execution to gain elevated system permissions. An attacker would need to already have basic access to the target system, but could then leverage this flaw to obtain administrator-level control. Security teams should prioritize patching Trend Micro Apex One installations and review system access logs for any suspicious low-privilege code execution that could indicate exploitation attempts.

Related CVE

CVE-2025-71217

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy