Apex One and Apex Central
CVE-2023-25147: An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrati…
An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trend Micro Apex One 2019 (14.0) | 14.0.0.11564 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process.
Please note: an attacker must first obtain administrative access on the target system via another method in order to exploit this.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.