CVE-2023-25144: Trend Micro Apex One

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership.

Affected products

• Trend Micro Apex One: before 14.0.11960 (fixed in 14.0.11960); version 2019 only

Published 2023-03-10. Last modified 2026-06-17.