Cyber Resilience

CVE-2026-45208

High

Published: 21 May 2026

Published
21 May 2026
Modified
22 May 2026
KEV Added
Patch
CVSS Score v3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0021 11.7th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-45208 is a high-severity Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) vulnerability in Trendmicro Apex One. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 11.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to…

more

exploit this vulnerability.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

TOCTOU race condition in security agent directly enables local privilege escalation from low-privileged code execution (T1068).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2026-45206Same product: Trendmicro Apex One
CVE-2026-34929Same product: Trendmicro Apex One
CVE-2026-34930Same product: Trendmicro Apex One
CVE-2026-45207Same product: Trendmicro Apex One
CVE-2026-34927Same product: Trendmicro Apex One
CVE-2024-58105Same product: Trendmicro Apex One
CVE-2025-71216Same product: Trendmicro Apex One
CVE-2026-34928Same product: Trendmicro Apex One
CVE-2024-58104Same product: Trendmicro Apex One
CVE-2025-71213Same product: Trendmicro Apex One

Affected Assets

trendmicro
apex one
≤ 14.0.0.17079 · ≤ 14.0.20731

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-367

Timestamps meeting UTC or offset standards help identify TOCTOU issues through precise chronological reconstruction of check/use operations.

References