CVE-2026-34929

Undergoing Analysis Undergoing Analysis - In Progress

Privilege Escalation in Apex One SEP Agent

Publication date: 2026-05-21

Last updated on: 2026-05-22

Assigner: Trend Micro, Inc.

Description

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-21

Last Modified

2026-05-22

Generated

2026-07-07

AI Q&A

2026-05-21

EPSS Evaluated

2026-07-06

NVD

CVE-2026-34929

EUVD

EUVD-2026-31280

Affected Vendors & Products

Vendor	Product	Version / Range
trendmicro	apex_one	to 14.0.20731 (exc)
trendmicro	apex_one	to 14.0.0.17079 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-346	The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

Mitigation Strategies

To mitigate this vulnerability, ensure that you update your Apex One and SEP agent installations to the latest versions provided by Trend Micro. Since the vulnerability requires local code execution, restricting low-privileged code execution and applying the vendor's patches are critical steps.

Executive Summary

This vulnerability is an origin validation flaw in the Apex One/SEP agent. It allows a local attacker, who already has the ability to execute low-privileged code on the target system, to escalate their privileges. The issue exists in a specific inter-process communication mechanism and is similar to another vulnerability identified as CVE-2026-34927.

Impact Analysis

If exploited, this vulnerability can allow an attacker with low-level access to escalate their privileges on the affected system. This means the attacker could gain higher-level permissions, potentially leading to full control over the system, compromising confidentiality, integrity, and availability.

Hi! I’m here to help you understand CVE-2026-34929. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70