Local Privilege Escalation Risk in Trend Micro Apex One Damage Cleanup Engine
CVE-2025-49157

7.8HIGH

What is CVE-2025-49157?

The Trend Micro Apex One Damage Cleanup Engine has a local privilege escalation vulnerability. This flaw could allow a local attacker to gain elevated privileges on installations. To exploit this vulnerability, an attacker must first have the ability to execute low-privileged code within the target system. Proper measures and patches should be applied to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Trend Micro Apex One 2019 (14.0) < 14.0.0.14002

Trend Micro Apex One as a Service SaaS < 14.0.14492

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49157 : Local Privilege Escalation Risk in Trend Micro Apex One Damage Cleanup Engine