A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.

cve CVE-2025-69260 1 source, 1 claim · Watch

NVD writes:
A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability. Una vulnerabilidad de lectura fuera de límites de mensaje en Trend Micro Apex Central podría permitir a un atacante remoto crear una condición de denegación de servicio en las instalaciones afectadas. Tenga en cuenta: la autenticación no es necesaria para explotar esta vulnerabilidad. the claim

What it is to other things

affects	microsoft/windows NVD
affects	trendmicro/apex_central NVD
made_by	microsoft NVD
made_by	trendmicro NVD

In words only, so not counted until a person confirms one:

affects	`trend_micro_inc/trend_micro_apex_central` NVD says “Trend Micro, Inc. · Trend Micro Apex Central”
made_by	`trend_micro_inc` NVD says “Trend Micro, Inc.”

What each source says

Property	Source	Said	Means here
Cvss cvss	NVD	7.5 receipt Source NVD Its words `7.5` Read by `field:cve.metrics.cvssMetricV31[].cvssData.baseScore` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 12:15 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "cpes": [ "cpe:2.3:a:trendmicro:apexcentral:2019:7190:-::-:windows::" ], "product": "Trend Micro Apex Central", "vendor": "Trend Micro, Inc.", "versions": [ { "lessThan": "Build 7190", "status": "affected", "version": "2019 (14.0)", "versionType": "semver" } ] } ], "source": "security@trendmicro.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:-:::-:::", "matchCriteriaId": "664A5F5B-7494-4ADF-9028-CA5DC84AF91A", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_3752:::-:::", "matchCriteriaId": "316E50F7-A9DA-4B67-9ECC-C8D50116BA07", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_5158:::-:::", "matchCriteriaId": "8FBF6D0D-D68E-4DB2-B4DE-D4157FEE54F2", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6016:::-:::", "matchCriteriaId": "4B11EE47-757F-4A7D-806A-01C956535F4E", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6288:::-:::", "matchCriteriaId": "FB8D4938-783C-4954-95C0-BD26162330A6", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6394:::-:::", "matchCriteriaId": "8FFFED78-5927-4529-B74C-BF988108EC0C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6481:::-:::", "matchCriteriaId": "D919B553-6CBD-4211-A507-CD930D485852", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6511:::-:::", "matchCriteriaId": "F30EC7A8-6E0D-40CE-9691-90F438F1F03B", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6571:::-:::", "matchCriteriaId": "F905E86D-E3D9-4E54-B2A6-01753043A9F4", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6658:::-:::", "matchCriteriaId": "231493F7-3804-4123-BE1E-ABC3AC46DAAF", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6660:::-:::", "matchCriteriaId": "983C3666-DF36-4C30-BD70-669734D28475", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6890:::-:::", "matchCriteriaId": "2EFB9449-DB07-4F75-AB53-23F2B721C0CE", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6955:::-:::", "matchCriteriaId": "8F586BF3-DD53-4243-8A9F-18D0599E9397", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7007:::-:::", "matchCriteriaId": "90DA4B19-8DE2-48B6-B5A7-528AD8978C00", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7065:::-:::", "matchCriteriaId": "F48D37D0-0FA2-4C9D-A121-C64B0F8F8D1C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7141:::-:::", "matchCriteriaId": "A4AC419E-AB59-46E0-BEDF-CAD6AF84E8BB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows:-:::::::", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.\r\n\r\nPlease note: authentication is not required in order to exploit this vulnerability." }, { "lang": "es", "value": "Una vulnerabilidad de lectura fuera de límites de mensaje en Trend Micro Apex Central podría permitir a un atacante remoto crear una condición de denegación de servicio en las instalaciones afectadas.\n\nTenga en cuenta: la autenticación no es necesaria para explotar esta vulnerabilidad." } ], "id": "CVE-2025-69260", "lastModified": "2026-09-30T23:10:00.237", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@trendmicro.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-69260", "options": [ { "exploitation": "none" }, { "automatable": "yes" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2026-01-08T14:58:39.498913Z", "version": "2.0.3" } } ] }, "published": "2026-01-08T13:15:43.153", "references": [ { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/en-US/solution/KA-0022071" }, { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/ja-JP/solution/KA-0022081" }, { "source": "security@trendmicro.com", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://www.tenable.com/security/research/tra-2026-01" } ], "sourceIdentifier": "security@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-120" }, { "lang": "en", "value": "CWE-346" } ], "source": "security@trendmicro.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }	—
Product product	NVD	Trend Micro Apex Central receipt Source NVD Its words `Trend Micro Apex Central` Read by `field:cve.affected[].affectedData[].product` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 12:15 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "cpes": [ "cpe:2.3:a:trendmicro:apexcentral:2019:7190:-::-:windows::" ], "product": "Trend Micro Apex Central", "vendor": "Trend Micro, Inc.", "versions": [ { "lessThan": "Build 7190", "status": "affected", "version": "2019 (14.0)", "versionType": "semver" } ] } ], "source": "security@trendmicro.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:-:::-:::", "matchCriteriaId": "664A5F5B-7494-4ADF-9028-CA5DC84AF91A", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_3752:::-:::", "matchCriteriaId": "316E50F7-A9DA-4B67-9ECC-C8D50116BA07", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_5158:::-:::", "matchCriteriaId": "8FBF6D0D-D68E-4DB2-B4DE-D4157FEE54F2", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6016:::-:::", "matchCriteriaId": "4B11EE47-757F-4A7D-806A-01C956535F4E", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6288:::-:::", "matchCriteriaId": "FB8D4938-783C-4954-95C0-BD26162330A6", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6394:::-:::", "matchCriteriaId": "8FFFED78-5927-4529-B74C-BF988108EC0C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6481:::-:::", "matchCriteriaId": "D919B553-6CBD-4211-A507-CD930D485852", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6511:::-:::", "matchCriteriaId": "F30EC7A8-6E0D-40CE-9691-90F438F1F03B", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6571:::-:::", "matchCriteriaId": "F905E86D-E3D9-4E54-B2A6-01753043A9F4", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6658:::-:::", "matchCriteriaId": "231493F7-3804-4123-BE1E-ABC3AC46DAAF", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6660:::-:::", "matchCriteriaId": "983C3666-DF36-4C30-BD70-669734D28475", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6890:::-:::", "matchCriteriaId": "2EFB9449-DB07-4F75-AB53-23F2B721C0CE", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6955:::-:::", "matchCriteriaId": "8F586BF3-DD53-4243-8A9F-18D0599E9397", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7007:::-:::", "matchCriteriaId": "90DA4B19-8DE2-48B6-B5A7-528AD8978C00", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7065:::-:::", "matchCriteriaId": "F48D37D0-0FA2-4C9D-A121-C64B0F8F8D1C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7141:::-:::", "matchCriteriaId": "A4AC419E-AB59-46E0-BEDF-CAD6AF84E8BB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows:-:::::::", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.\r\n\r\nPlease note: authentication is not required in order to exploit this vulnerability." }, { "lang": "es", "value": "Una vulnerabilidad de lectura fuera de límites de mensaje en Trend Micro Apex Central podría permitir a un atacante remoto crear una condición de denegación de servicio en las instalaciones afectadas.\n\nTenga en cuenta: la autenticación no es necesaria para explotar esta vulnerabilidad." } ], "id": "CVE-2025-69260", "lastModified": "2026-09-30T23:10:00.237", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@trendmicro.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-69260", "options": [ { "exploitation": "none" }, { "automatable": "yes" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2026-01-08T14:58:39.498913Z", "version": "2.0.3" } } ] }, "published": "2026-01-08T13:15:43.153", "references": [ { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/en-US/solution/KA-0022071" }, { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/ja-JP/solution/KA-0022081" }, { "source": "security@trendmicro.com", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://www.tenable.com/security/research/tra-2026-01" } ], "sourceIdentifier": "security@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-120" }, { "lang": "en", "value": "CWE-346" } ], "source": "security@trendmicro.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }	—
Status status	NVD	Analyzed receipt Source NVD Its words `Analyzed` Read by `field:cve.vulnStatus` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 12:15 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "cpes": [ "cpe:2.3:a:trendmicro:apexcentral:2019:7190:-::-:windows::" ], "product": "Trend Micro Apex Central", "vendor": "Trend Micro, Inc.", "versions": [ { "lessThan": "Build 7190", "status": "affected", "version": "2019 (14.0)", "versionType": "semver" } ] } ], "source": "security@trendmicro.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:-:::-:::", "matchCriteriaId": "664A5F5B-7494-4ADF-9028-CA5DC84AF91A", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_3752:::-:::", "matchCriteriaId": "316E50F7-A9DA-4B67-9ECC-C8D50116BA07", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_5158:::-:::", "matchCriteriaId": "8FBF6D0D-D68E-4DB2-B4DE-D4157FEE54F2", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6016:::-:::", "matchCriteriaId": "4B11EE47-757F-4A7D-806A-01C956535F4E", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6288:::-:::", "matchCriteriaId": "FB8D4938-783C-4954-95C0-BD26162330A6", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6394:::-:::", "matchCriteriaId": "8FFFED78-5927-4529-B74C-BF988108EC0C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6481:::-:::", "matchCriteriaId": "D919B553-6CBD-4211-A507-CD930D485852", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6511:::-:::", "matchCriteriaId": "F30EC7A8-6E0D-40CE-9691-90F438F1F03B", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6571:::-:::", "matchCriteriaId": "F905E86D-E3D9-4E54-B2A6-01753043A9F4", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6658:::-:::", "matchCriteriaId": "231493F7-3804-4123-BE1E-ABC3AC46DAAF", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6660:::-:::", "matchCriteriaId": "983C3666-DF36-4C30-BD70-669734D28475", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6890:::-:::", "matchCriteriaId": "2EFB9449-DB07-4F75-AB53-23F2B721C0CE", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6955:::-:::", "matchCriteriaId": "8F586BF3-DD53-4243-8A9F-18D0599E9397", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7007:::-:::", "matchCriteriaId": "90DA4B19-8DE2-48B6-B5A7-528AD8978C00", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7065:::-:::", "matchCriteriaId": "F48D37D0-0FA2-4C9D-A121-C64B0F8F8D1C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7141:::-:::", "matchCriteriaId": "A4AC419E-AB59-46E0-BEDF-CAD6AF84E8BB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows:-:::::::", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.\r\n\r\nPlease note: authentication is not required in order to exploit this vulnerability." }, { "lang": "es", "value": "Una vulnerabilidad de lectura fuera de límites de mensaje en Trend Micro Apex Central podría permitir a un atacante remoto crear una condición de denegación de servicio en las instalaciones afectadas.\n\nTenga en cuenta: la autenticación no es necesaria para explotar esta vulnerabilidad." } ], "id": "CVE-2025-69260", "lastModified": "2026-09-30T23:10:00.237", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@trendmicro.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-69260", "options": [ { "exploitation": "none" }, { "automatable": "yes" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2026-01-08T14:58:39.498913Z", "version": "2.0.3" } } ] }, "published": "2026-01-08T13:15:43.153", "references": [ { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/en-US/solution/KA-0022071" }, { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/ja-JP/solution/KA-0022081" }, { "source": "security@trendmicro.com", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://www.tenable.com/security/research/tra-2026-01" } ], "sourceIdentifier": "security@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-120" }, { "lang": "en", "value": "CWE-346" } ], "source": "security@trendmicro.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }	—
Vendor vendor	NVD	Trend Micro, Inc. receipt Source NVD Its words `Trend Micro, Inc.` Read by `field:cve.affected[].affectedData[].vendor` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 12:15 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "cpes": [ "cpe:2.3:a:trendmicro:apexcentral:2019:7190:-::-:windows::" ], "product": "Trend Micro Apex Central", "vendor": "Trend Micro, Inc.", "versions": [ { "lessThan": "Build 7190", "status": "affected", "version": "2019 (14.0)", "versionType": "semver" } ] } ], "source": "security@trendmicro.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:-:::-:::", "matchCriteriaId": "664A5F5B-7494-4ADF-9028-CA5DC84AF91A", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_3752:::-:::", "matchCriteriaId": "316E50F7-A9DA-4B67-9ECC-C8D50116BA07", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_5158:::-:::", "matchCriteriaId": "8FBF6D0D-D68E-4DB2-B4DE-D4157FEE54F2", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6016:::-:::", "matchCriteriaId": "4B11EE47-757F-4A7D-806A-01C956535F4E", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6288:::-:::", "matchCriteriaId": "FB8D4938-783C-4954-95C0-BD26162330A6", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6394:::-:::", "matchCriteriaId": "8FFFED78-5927-4529-B74C-BF988108EC0C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6481:::-:::", "matchCriteriaId": "D919B553-6CBD-4211-A507-CD930D485852", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6511:::-:::", "matchCriteriaId": "F30EC7A8-6E0D-40CE-9691-90F438F1F03B", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6571:::-:::", "matchCriteriaId": "F905E86D-E3D9-4E54-B2A6-01753043A9F4", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6658:::-:::", "matchCriteriaId": "231493F7-3804-4123-BE1E-ABC3AC46DAAF", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6660:::-:::", "matchCriteriaId": "983C3666-DF36-4C30-BD70-669734D28475", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6890:::-:::", "matchCriteriaId": "2EFB9449-DB07-4F75-AB53-23F2B721C0CE", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6955:::-:::", "matchCriteriaId": "8F586BF3-DD53-4243-8A9F-18D0599E9397", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7007:::-:::", "matchCriteriaId": "90DA4B19-8DE2-48B6-B5A7-528AD8978C00", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7065:::-:::", "matchCriteriaId": "F48D37D0-0FA2-4C9D-A121-C64B0F8F8D1C", "vulnerable": true }, { "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7141:::-:::", "matchCriteriaId": "A4AC419E-AB59-46E0-BEDF-CAD6AF84E8BB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows:-:::::::", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.\r\n\r\nPlease note: authentication is not required in order to exploit this vulnerability." }, { "lang": "es", "value": "Una vulnerabilidad de lectura fuera de límites de mensaje en Trend Micro Apex Central podría permitir a un atacante remoto crear una condición de denegación de servicio en las instalaciones afectadas.\n\nTenga en cuenta: la autenticación no es necesaria para explotar esta vulnerabilidad." } ], "id": "CVE-2025-69260", "lastModified": "2026-09-30T23:10:00.237", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@trendmicro.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-69260", "options": [ { "exploitation": "none" }, { "automatable": "yes" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2026-01-08T14:58:39.498913Z", "version": "2.0.3" } } ] }, "published": "2026-01-08T13:15:43.153", "references": [ { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/en-US/solution/KA-0022071" }, { "source": "security@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://success.trendmicro.com/ja-JP/solution/KA-0022081" }, { "source": "security@trendmicro.com", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://www.tenable.com/security/research/tra-2026-01" } ], "sourceIdentifier": "security@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-120" }, { "lang": "en", "value": "CWE-346" } ], "source": "security@trendmicro.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }	—

vulnerability

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.

zetlyn/cve-nvd · 2026-01-08

cvss 7.5 product Trend Micro Apex Central status Analyzed vendor Trend Micro, Inc.

source