Apex One and Apex Central
CVE-2025-71216: Time-of-check time-of-use in TrendAI Apex One (Mac)
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| TrendAI Apex One (Mac) NA | NA or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.