CVE-2026-34928 — Trend Micro, Inc. / TrendAI Apex One

CVE-2026-34928

Trend Micro, Inc. / TrendAI Apex One PUBLISHED

Description (CNA)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected (CNA)

Vendor / product	Versions
Trend Micro, Inc. / TrendAI Apex One	affected 2019 (14.0) before 14.0.0.17079
Trend Micro, Inc. / TrendAI Apex One as a Service	affected SaaS before 14.0.20731

CWE

CWE-346

References

https://success.trendmicro.com/en-US/solution/KA-0023430

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.