CVE-2025-69260CWE-120CWE-125CWE-346

CVE-2025-69260

High · published January 8, 2026

CVSS v3.1
7.5
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds read vulnerability in Trend Micro Apex Central lets attackers wreak havoc without breaking a sweat! ⚡ Think of it like a restaurant running out of bread – when a customer orders a sandwich, but the kitchen isn’t keeping track of stock, chaos ensues when they can’t serve it. In this case, the service can crash, leaving everyone hanging! This vulnerability could lead to a denial-of-service condition, meaning attackers can potentially bring your Trend Micro Apex Central installations to a screeching halt. Imagine your security system being knocked offline, leaving your network vulnerable and unprotected!

Put simply

Think of it like a restaurant running out of bread – when a customer orders a sandwich, but the kitchen isn’t keeping track of stock, chaos ensues when they can’t serve it. In this case, the service can crash, leaving everyone hanging! This message out-of-bounds read flaw allows a remote attacker to exploit the service without needing any authentication, essentially sending it on a wild goose chase to read data it shouldn't. 🌐

What to do

This vulnerability could lead to a denial-of-service condition, meaning attackers can potentially bring your Trend Micro Apex Central installations to a screeching halt. Imagine your security system being knocked offline, leaving your network vulnerable and unprotected! To secure your system, upgrade to the latest patched version of Trend Micro Apex Central immediately and monitor your installations for any signs of unusual activity. It's critical to maintain your security posture! 🛡️ You've got this! By acting now, you're on your way to keeping your systems safe and sound! 🎉

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01576 · 75.3th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-125 · Out-of-bounds Read; CWE-346 · Origin Validation Error
Published
2026-01-08T18:15Z
Affected products (16)
ProductVersionsFixed in
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
trendmicro/apex_centralall versions—
References (3)
EPSS history
Timeline
  • 08 JAN 12:50Z
    A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected…
    cvelistv5