9.8Critical
CVE-2025-69258
Description
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Trend Micro, Inc. | Trend Micro Apex Central | 2019 (14.0) – < Build 7190 | |
| trendmicro | apex central | 2019 | |
| trendmicro | apexcentral | 2019 |
References and patches
- https://success.trendmicro.com/en-US/solution/KA-0022071 Vendor Advisory
- https://success.trendmicro.com/ja-JP/solution/KA-0022081 Vendor Advisory
- https://www.tenable.com/security/research/tra-2026-01 ExploitThird Party Advisory
CPE matches (NVD) (16)
cpe:2.3:a:trendmicro:apex_central:2019:-:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_3752:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_5158:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6016:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6288:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6394:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6481:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6511:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6571:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6658:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6660:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6890:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_6955:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_7007:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_7065:*:*:-:*:*:*cpe:2.3:a:trendmicro:apex_central:2019:build_7141:*:*:-:*:*:*