CVE-2025-71214: trendmicro apex one

csirt@kutim:~/threat-intel/cve/CVE-2025-71214

CVSS 7.8 · High EPSS 0,36%

Kerentanan Origin Validation Error pada trendmicro apex one. Skor CVSS 3.1 7.8 (High) menurut CISA ADP.

Deskripsi (NVD)

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).

Rincian

Terbit di NVD: 21 Mei 2026
Terakhir diubah: 23 Juli 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-346: Origin Validation Error
EPSS (30 hari): 0,36% peluang dieksploitasi; lebih tinggi dari 27,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
trendmicro	apex one	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://success.trendmicro.com/en-US/solution/KA-0022458 advisory vendor
https://www.zerodayinitiative.com/advisories/ZDI-26-139/ advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.