Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.
Product
Trend Micro Apex One ist eine Endpoint-Security Lösung.
Vulnerabilities 8
-
Medium 6.7
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker …
KEV May 21, 2026 -
High 7.8
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…
-
High 7.8
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…
-
High 7.8
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…
-
High 7.8
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…
-
High 7.8
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…
-
High 7.8
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…
-
High 7.8
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges…
Revision history
-
#2
Referenz(en) aufgenommen: ZDI-26-325, ZDI-26-324, ZDI-26-322, ZDI-26-321, ZDI-26-320, ZDI-26-323, ZDI-26-326
-
#1
Initiale Fassung
References
-
TrendMicro Security Bulletin vom 2026-05-21
https://success.trendmicro.com/en-US/solution/KA-0023430