CVE-2025-69258

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@trendmicro.com

Published

2026-01-08

Last modified

2026-10-07

Weaknesses

CWE-120, CWE-290, CWE-346

Affected products

• Apex Central (Trendmicro)
• Apexcentral (Trendmicro)

References

• https://success.trendmicro.com/en-US/solution/KA-0022071
• https://success.trendmicro.com/ja-JP/solution/KA-0022081
• https://www.tenable.com/security/research/tra-2026-01