This vulnerability is a TOCTOU race condition in Trend Micro TrendAI Apex One agent version 2019 (14.0). It enables an attacker who already has the ability to execute low-privileged code locally to escalate their privileges on the affected system. The CVSS 3.1 score of 7.8 reflects high impact on confidentiality, integrity, and availability. As of the published date, no official remediation or patch has been released by Trend Micro. No exploits are currently known in the wild, limiting immediate risk to environments where an attacker has local code execution.

Successful exploitation could allow a local attacker to escalate privileges from a low-privileged context to higher privileges, potentially compromising system confidentiality, integrity, and availability. Since exploitation requires prior local code execution, the attack vector is limited to attackers with some initial access to the system.

No official patch or remediation guidance is currently available from the vendor. Organizations should monitor Trend Micro advisories for updates. Because exploitation requires local code execution, limiting local access and enforcing least privilege principles can reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.