Browse CVEs

HIGH 7.8 CVE-2025-71214 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on… Apex One Mitigation only Fix from $1,9502026-05-21 HIGH 7.8 CVE-2025-71216 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges… Apex One Mitigation only Fix from $1,9502026-05-21 HIGH 7.8 CVE-2025-71217 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate p… Apex One Mitigation only Fix from $1,9502026-05-21 HIGH 7.0 CVE-2025-71215 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker t… Apex One Mitigation only Fix from $1,9502026-05-21 HIGH 7.5 CVE-2025-69259 A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition… Apex Central No fix yet Fix from $1,9502026-01-08 HIGH 7.5 CVE-2025-69260 A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affec… Apex Central No fix yet Fix from $1,9502026-01-08 CRITICAL 9.8 CVE-2025-69258 A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a ke… Apex Central Mitigation only Fix from $2,3002026-01-08 HIGH 7.1 CVE-2025-52521 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to … Maximum Security 2022 Mitigation only Fix from $1,9502025-07-10 HIGH 7.1 CVE-2025-49384 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to … Maximum Security 2022 Mitigation only Fix from $1,9502025-06-17 HIGH 7.1 CVE-2025-49385 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to … Maximum Security 2022 Mitigation only Fix from $1,9502025-06-17 HIGH 7.5 CVE-2025-30678 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate c… Apex Central Mitigation only Fix from $1,9502025-06-17 HIGH 7.5 CVE-2025-30679 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate c… Apex Central Mitigation only Fix from $1,9502025-06-17 CRITICAL 9.8 CVE-2025-49220 An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on … Apex Central Mitigation only Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-47865 A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code executio… Apex Central Mitigation only Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-47867 A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary fil… Apex Central Mitigation only Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-49219 An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on… Apex Central Mitigation only Fix from $2,3002025-06-17 HIGH 7.5 CVE-2025-47866 An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary fil… Apex Central Mitigation only Fix from $1,9502025-06-17 CRITICAL 9.0 CVE-2025-31286 An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code. Please no… Trend Vision One Mitigation only Fix from $2,3002025-04-02 HIGH 7.2 CVE-2025-31284 A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create us… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.2 CVE-2025-31285 A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.2 CVE-2025-31283 A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to creat… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.2 CVE-2025-31282 A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to cre… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.3 CVE-2024-55955 An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow … Deep Security Agent Mitigation only Fix from $1,9502024-12-31 HIGH 8.8 CVE-2024-51503 A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges… Deep Security Agent Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2024-36358 A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges o… Deep Security Agent Mitigation only Fix from $1,9502024-06-10 MEDIUM 5.4 CVE-2024-36359 A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate pr… Interscan Web Security Virtual Appliance Mitigation only Fix from $1,6002024-06-10 HIGH 8.8 CVE-2023-52324 An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installatio… Apex Central Mitigation only Fix from $1,9502024-01-23 HIGH 7.8 CVE-2023-52337 An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could all… Deep Security Mitigation only Fix from $1,9502024-01-23 HIGH 7.8 CVE-2023-52338 A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a l… Deep Security Mitigation only Fix from $1,9502024-01-23 HIGH 7.5 CVE-2023-52325 A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected… Apex Central Mitigation only Fix from $1,9502024-01-23