Local Privilege Escalation Vulnerability in Trend Micro Apex One Agent for Mac

CVE-2025-71216

What is CVE-2025-71216?

A time-of-check time-of-use vulnerability has been identified in the cache mechanism of the Trend Micro Apex One (mac) agent. This flaw could enable a local attacker who has executed low-privileged code to escalate their privileges on vulnerable installations. It is essential to note that to exploit this vulnerability, the attacker must first gain a foothold in the system with low privileges. The issue has already been addressed through scheduled updates, ensuring improved security for users.

References