Local Privilege Escalation Risk in Trend Micro Apex One Damage Cleanup Engine
CVE-2025-49157
7.8HIGH
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 17 June 2025
What is CVE-2025-49157?
The Trend Micro Apex One Damage Cleanup Engine has a local privilege escalation vulnerability. This flaw could allow a local attacker to gain elevated privileges on installations. To exploit this vulnerability, an attacker must first have the ability to execute low-privileged code within the target system. Proper measures and patches should be applied to mitigate potential risks associated with this vulnerability.
Affected Version(s)
Trend Micro Apex One 2019 (14.0) < 14.0.0.14002
Trend Micro Apex One as a Service SaaS < 14.0.14492