Apex One and Apex Central
CVE-2025-71214: Origin validation error in TrendAI Apex One (Mac)
An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| TrendAI Apex One (Mac) NA | NA or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.