CVE-2025-69260: trend micro, inc. trend micro apex central Classic Buffer Overflow

Vulnerability summary

CVE-2025-69260 is a high (CVSS 7.5) Classic Buffer Overflow vulnerability in trend micro, inc. trend micro apex central. EPSS estimates a 1.58% chance of exploitation in the next 30 days, higher than 75% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 08-01-2026
   PublishedVulnerability first disclosed.
2. 08-01-2026
   Last modifiedVulnerability information updated.

Description

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
• CWE-346Origin Validation ErrorThe product does not properly verify that the source of data or communication is valid.
• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.