CVE-2026-34928: High severity Trend Micro Apex One vulnerability
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34928?
CVE-2026-34928 has a severity rating of 7.8, indicating it is classified as high severity.
How does CVE-2026-34928 affect affected installations?
CVE-2026-34928 allows a local attacker to escalate privileges on affected installations of Trend Micro Apex One and Symantec Endpoint Protection.
What is the risk associated with exploiting CVE-2026-34928?
The risk associated with CVE-2026-34928 is set at 69, highlighting a significant potential for damage if exploited.
What type of vulnerability is CVE-2026-34928?
CVE-2026-34928 is classified as an origin validation vulnerability specifically related to named pipe communication mechanisms.
What must an attacker do before exploiting CVE-2026-34928?
An attacker must first obtain the ability to execute commands on the affected system before they can exploit CVE-2026-34928.