PT-2026-22852 · Trend Micro · Trendai Apex One

Published 2026-03-03 · Updated 2026-05-21 · CVE-2025-71215

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (mac) agent (affected versions not specified)

Description A time-of-check time-of-use (TOCTOU) issue exists in the iCore service signature verification. A TOCTOU is a race condition where a system checks a condition (such as a security credential) and then uses the result of that check, but the condition changes between the check and the use. This could allow a local attacker who already has the ability to execute low-privileged code on the target system to escalate their privileges.

Recommendations Update the software via ActiveUpdate or SaaS updates to the SaaS 2507 or 2005 Yearly Release.

Fix

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2025-71215

ZDI-26-141

Affected Products

Trendai Apex One

References · 4

• https://zerodayinitiative.com/advisories/ZDI-26-141 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71215 · Security Note
• https://t.me/CVEtracker/54514 · Telegram Post
• https://success.trendmicro.com/en-US/solution/KA-0022458 · Note