ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability
ZDI-26-654: Trend Micro Apex One incomplete cleanup flaw, CVE-2025-71414, enables local privilege escalation, rated CVSS 7.8.
The Zero Day Initiative published advisory ZDI-26-654 for the Trend Micro Apex One Security Agent. An incomplete cleanup flaw, tracked as CVE-2025-71414, allows local attackers to escalate privileges after gaining low-privileged code execution. ZDI assigned a CVSS 7.8 rating. The advisory accompanies a vendor fix for affected installations.
25