Local Privilege Escalation Vulnerability in Trend Micro Apex One (mac) Agent

CVE-2025-71215

What is CVE-2025-71215?

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent's iCore service signature verification presents a risk of local privilege escalation. This vulnerability requires an attacker to have the capability to execute low-privileged code on the target machine, potentially allowing them to gain elevated access rights. Although addressed through active updates in mid to late 2025, it remains essential for users to remain vigilant and ensure that all security patches are applied promptly.

References