CVE-2025-69259CWE-120CWE-346CWE-476

CVE-2025-69259

High · published January 8, 2026

CVSS v3.1
7.5
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

🚨 A message unchecked NULL return value is just waiting to crash your day! An attacker can trigger a denial-of-service condition without even logging in! ⚡ Imagine a restaurant that runs out of critical ingredients but has no system to check inventory. When an unexpected order comes in, the kitchen goes into chaos, unable to serve customers — that’s what happens here when this vulnerability is exploited! An attacker could bring your Trend Micro Apex Central installation to a grinding halt, causing disruptions for all users. This means your defenses could be down, leaving you vulnerable to real threats while everyone waits for service to resume. Absolutely devastating!

Put simply

Imagine a restaurant that runs out of critical ingredients but has no system to check inventory. When an unexpected order comes in, the kitchen goes into chaos, unable to serve customers — that’s what happens here when this vulnerability is exploited! This vulnerability allows an attacker to exploit a NULL return value in message handling, leading to a denial-of-service condition. It's a classic case of unhandled exceptions causing total system failure.

What to do

An attacker could bring your Trend Micro Apex Central installation to a grinding halt, causing disruptions for all users. This means your defenses could be down, leaving you vulnerable to real threats while everyone waits for service to resume. Absolutely devastating! Immediately patch your Trend Micro Apex Central to the latest version to resolve this issue. Also, review your monitoring systems to ensure any unexpected behaviors are quickly addressed. Taking proactive steps now can save you from a headache later! You've got this! Follow these steps and you’ll have your system protected in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01576 · 75.3th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-346 · Origin Validation Error; CWE-476 · NULL Pointer Dereference
Published
2026-01-08T18:15Z
Affected products (16)
ProductVersionsFixed in
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
References (3)
EPSS history
Timeline
  • 08 JAN 12:50Z
    A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on…
    cvelistv5