CVE-2025-69258

Published Jan 8, 2026

Last updated a month ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-69258 is a LoadLibraryEX vulnerability identified in Trend Micro Apex Central, specifically affecting its on-premise Windows versions. This flaw enables an unauthenticated remote attacker to load a malicious Dynamic Link Library (DLL) into a critical executable, such as `MsgReceiver.exe`, within the affected system. Successful exploitation of this vulnerability allows the attacker to execute arbitrary code with SYSTEM-level privileges on the compromised installation. The attack can be carried out by sending a specially crafted message, specifically `0x0a8d` ("SC_INSTALL_HANDLER_REQUEST"), to the `MsgReceiver.exe` component, which typically listens on TCP port 20001. No user interaction or prior authentication is required for an attacker to leverage this vulnerability.

Description: A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
Source: security@trendmicro.com
NVD status: Analyzed
Products: apex_central

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security@trendmicro.com: CWE-120

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:-:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "664A5F5B-7494-4ADF-9028-CA5DC84AF91A"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_3752:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "316E50F7-A9DA-4B67-9ECC-C8D50116BA07"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_5158:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8FBF6D0D-D68E-4DB2-B4DE-D4157FEE54F2"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6016:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B11EE47-757F-4A7D-806A-01C956535F4E"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6288:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB8D4938-783C-4954-95C0-BD26162330A6"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6394:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8FFFED78-5927-4529-B74C-BF988108EC0C"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6481:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D919B553-6CBD-4211-A507-CD930D485852"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6511:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F30EC7A8-6E0D-40CE-9691-90F438F1F03B"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6571:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F905E86D-E3D9-4E54-B2A6-01753043A9F4"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6658:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "231493F7-3804-4123-BE1E-ABC3AC46DAAF"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6660:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "983C3666-DF36-4C30-BD70-669734D28475"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6890:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2EFB9449-DB07-4F75-AB53-23F2B721C0CE"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6955:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F586BF3-DD53-4243-8A9F-18D0599E9397"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7007:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90DA4B19-8DE2-48B6-B5A7-528AD8978C00"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7065:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F48D37D0-0FA2-4C9D-A121-C64B0F8F8D1C"
          },
          {
            "criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_7141:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A4AC419E-AB59-46E0-BEDF-CAD6AF84E8BB"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.