CVE-2025-69258

Published Jan 8, 2026

Last updated 3 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-69258 is a LoadLibraryEX vulnerability identified in Trend Micro Apex Central, specifically affecting its on-premise Windows versions. This flaw enables an unauthenticated remote attacker to load a malicious Dynamic Link Library (DLL) into a critical executable, such as `MsgReceiver.exe`, within the affected system. Successful exploitation of this vulnerability allows the attacker to execute arbitrary code with SYSTEM-level privileges on the compromised installation. The attack can be carried out by sending a specially crafted message, specifically `0x0a8d` ("SC_INSTALL_HANDLER_REQUEST"), to the `MsgReceiver.exe` component, which typically listens on TCP port 20001. No user interaction or prior authentication is required for an attacker to leverage this vulnerability.

Description: A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
Source: security@trendmicro.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security@trendmicro.com: CWE-120

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

References