CVE-2025-69258: trend micro, inc. trend micro apex central Classic Buffer Overflow

Vulnerability summary

CVE-2025-69258 is a critical (CVSS 9.8) Classic Buffer Overflow vulnerability in trend micro, inc. trend micro apex central. EPSS estimates a 3.57% chance of exploitation in the next 30 days, higher than 89.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 08-01-2026
   PublishedVulnerability first disclosed.
2. 26-02-2026
   Last modifiedVulnerability information updated.

Description

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
• CWE-290Authentication Bypass by SpoofingThis attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
• CWE-346Origin Validation ErrorThe product does not properly verify that the source of data or communication is valid.