SB2026022466 - Multiple vulnerabilities in Trend Micro Apex One agent for Mac

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Origin validation error (CVE-ID: CVE-2025-71217)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to origin validation error in the agent self-protection mechanism. A local user can execute arbitrary code with elevated privileges. 

2) Race condition (CVE-ID: CVE-2025-71216)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in the agent cache mechanism. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

3) Race condition (CVE-ID: CVE-2025-71215)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in the agent iCore service. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

4) Origin validation error (CVE-ID: CVE-2025-71214)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to origin validation error in the agent iCore service. A local user can execute arbitrary code with elevated privileges. 

Remediation

Install update from vendor's website.

References

• https://success.trendmicro.com/en-US/solution/KA-0022458