Is CVE-2025-71214 actively exploited?

No active exploitation of CVE-2025-71214 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-71214 be exploited remotely?

No. CVE-2025-71214 requires local access to exploit.

What is the CVSS score of CVE-2025-71214?

CVE-2025-71214 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2025-71214

HIGH

CVE-2025-71214

Published: May 21, 2026· Updated: May 21, 2026

7.8

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.5th

Official Description

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).

NVD Source

Technical Analysis

CVE-2025-71214 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.