https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-45930.htmlhttps://patchthecve.com/cve/CVE-2026-45930.htmlThu, 25 Jun 2026 12:46:02 +0000MEDIUM 5.5: In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are initialised Syed Faraz Abrar (@farazsth98) from Zellic, and Pumpkin (@u1f383) from DEVCORE Research Team working with Trend Micro Zero Day Initiative report that a RTM_GETNEIGH will returnhttps://patchthecve.com/cve/CVE-2026-34926.htmlhttps://patchthecve.com/cve/CVE-2026-34926.htmlThu, 23 Jul 2026 16:10:00 +0000MEDIUM 6.7: A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Aphttps://patchthecve.com/cve/CVE-2025-71217.htmlhttps://patchthecve.com/cve/CVE-2025-71217.htmlThu, 23 Jul 2026 16:10:00 +0000HIGH 7.8: An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in ohttps://patchthecve.com/cve/CVE-2025-71216.htmlhttps://patchthecve.com/cve/CVE-2025-71216.htmlThu, 23 Jul 2026 16:10:00 +0000HIGH 7.8: A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to ehttps://patchthecve.com/cve/CVE-2025-71215.htmlhttps://patchthecve.com/cve/CVE-2025-71215.htmlThu, 23 Jul 2026 16:10:00 +0000HIGH 7.0: A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the targethttps://patchthecve.com/cve/CVE-2025-71214.htmlhttps://patchthecve.com/cve/CVE-2025-71214.htmlThu, 23 Jul 2026 16:10:00 +0000HIGH 7.8: An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to explhttps://patchthecve.com/cve/CVE-2025-71213.htmlhttps://patchthecve.com/cve/CVE-2025-71213.htmlThu, 23 Jul 2026 16:10:00 +0000HIGH 7.8: An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.https://patchthecve.com/cve/CVE-2025-71212.htmlhttps://patchthecve.com/cve/CVE-2025-71212.htmlThu, 23 Jul 2026 16:10:00 +0000HIGH 7.8: A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.https://patchthecve.com/cve/CVE-2025-71211.htmlhttps://patchthecve.com/cve/CVE-2025-71211.htmlThu, 23 Jul 2026 16:10:00 +0000CRITICAL 9.8: A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. Please note: although this vulnerabilhttps://patchthecve.com/cve/CVE-2025-71210.htmlhttps://patchthecve.com/cve/CVE-2025-71210.htmlThu, 23 Jul 2026 16:10:00 +0000CRITICAL 9.8: A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via