Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

Related vulnerabilities

2026-1112-TM-A1-002

Vulnerability from csaf_trendmicro - Published: 2026-11-12 14:00 - Updated: 2026-11-12 14:00

Summary

SECURITY BULLETIN: Apex One and Vision One Standard Endpoint Protection (SEP) November 2026 Security Bulletin

Scope

19 vulnerabilities in this advisory, including CVE-2026-111774.

CVE-2026-111774

An DLL search order hijacking vulnerability in Apex One (on-premise) could allow a local attacker to execute arbitrary code as SYSTEM on affected installations.

This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known affected: 2 products

http://downloadcenter.trendmicro.com/

Open the full advisory