Local Privilege Escalation Vulnerability in Apex One/SEP Agent by Trend Micro

CVE-2026-45208

What is CVE-2026-45208?

A security flaw exists within the Apex One/SEP Agent that permits a local attacker to exploit a time-of-check time-of-use scenario. This vulnerability enables the attacker to elevate their privileges on affected systems. However, to successfully exploit this weakness, the attacker must first gain the capability to execute low-privileged code on the target. Ensuring timely updates and security patches can mitigate the risk associated with this vulnerability.

References