CVE-2026-34929 Details
Description
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
A vulnerability allowing local privilege escalation has been identified in the Trend Micro Apex One and Vision One Endpoint Security - Standard Endpoint Protection (SEP) products. This vulnerability arises from an origin validation error in the Apex One/SEP agent, which could enable a local attacker to escalate privileges on affected installations. The issue is present in Apex One 2019 (on-premise) and in Apex One as a Service, as well as in Trend Micro Vision One - Standard Endpoint Protection (SEP) with agent builds prior to 14.0.20731. The vulnerability exists in different inter-process communication mechanisms, requiring an attacker to first execute low-privileged code on the target system to exploit it.
Users of Trend Micro Apex One (on-prem) should update to SP1 CP Build 18012 or SP1 Build 17079. For Apex One as a Service and Trend Micro Vision One - Standard Endpoint Protection (SEP), users should update to Security Agent build 14.0.20731.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 21, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://success.trendmicro.com/en-US/solution/KA-0023430 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-346 | Origin Validation Error | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| trendmicro apex one | < 14.0.0.17079 < 14.0.20731 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 22, 2026 | Initial Analysis | [email protected] |
| May 21, 2026 | New CVE Received | [email protected] |