PT-2026-22852 · Trend Micro · Apex One

CVE-2025-71215 · Published 2025-04-08 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (mac) agent (affected versions not specified)

Description A time-of-check time-of-use (TOCTOU) issue exists in the iCore service signature verification. A TOCTOU is a race condition where a system checks a condition (such as a security credential) and then uses the result of that check, but the condition changes between the check and the use. This could allow a local attacker who already has the ability to execute low-privileged code on the target system to escalate their privileges.

Recommendations Update the software via ActiveUpdate or SaaS updates to the SaaS 2507 or 2005 Yearly Release.

Fix

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2026-07814

CVE-2025-71215

ZDI-26-141

Affected Products

Apex One

References · 6

• https://success.trendmicro.com/en-US/solution/KA-0022458 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71215 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-141 · Security Note
• https://bdu.fstec.ru/vul/2026-07814 · Security Note
• https://t.me/cveNotify/217071 · Telegram Post
• https://t.me/CVEtracker/54514 · Telegram Post