by Kastro
Paper/Archive/CVE-2025-69258

CVE-2025-69258

Trend Micro, Inc. Trend Micro Apex Central — A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled D…

EPSS 4%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 89.4.894 × 2017.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.

Affected

ProductAffectedFixed inSource
Trend Micro Apex Central2019 (14.0) – < Build 7190Build 7190CNA

Scores by source

trendmicro (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsuccess.trendmicro.com/en-US/solution/KA-0022071refsuccess.trendmicro.com/ja-JP/solution/KA-0022081reftenable.com/security/research/tra-2026-01