Browse CVEs

MEDIUM 5.5 CVE-2020-25772 An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to … Apex One Mitigation only Fix from $1,6002020-09-29 HIGH 7.8 CVE-2020-24562 A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which th… Officescan Mitigation only Fix from $1,9502020-09-29 HIGH 7.8 CVE-2020-24563 A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), whi… Apex One Mitigation only Fix from $1,9502020-09-29 MEDIUM 5.5 CVE-2020-24564 An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to … Apex One Mitigation only Fix from $1,6002020-09-29 CRITICAL 9.1 CVE-2020-24561EPSS 5% A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system.… Serverprotect Mitigation only Fix from $2,3002020-09-15 HIGH 7.8 CVE-2020-24559 A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attack… Apex One Mitigation only Fix from $1,9502020-09-01 HIGH 7.8 CVE-2020-24556 A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsof… Apex One Mitigation only Fix from $1,9502020-09-01 HIGH 7.8 CVE-2020-24557 KEV A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particul… Apex One Mitigation only Fix from $1,9502020-09-01 HIGH 7.1 CVE-2020-24558 A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker… Apex One Mitigation only Fix from $1,9502020-09-01 HIGH 7.8 CVE-2020-8469 Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged… Password Manager Mitigation only Fix from $1,9502020-03-12 HIGH 7.8 CVE-2020-8601 Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL fil… Vulnerability Protection Mitigation only Fix from $1,9502020-02-20 HIGH 7.0 CVE-2019-14688 Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hija… Control Manager Mitigation only Fix from $1,9502020-02-20 HIGH 7.8 CVE-2019-20357 A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which c… Antivirus \+ Security 2019 No fix yet Fix from $1,9502020-01-18 MEDIUM 6.7 CVE-2019-19697 An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to … Antivirus \+ Security 2019 No fix yet Fix from $1,6002020-01-18 MEDIUM 6.1 CVE-2019-19692 Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that the Japanese version of the p… Apex One Mitigation only Fix from $1,6002019-12-20 HIGH 8.8 CVE-2019-18191 A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated … Deep Security As A Service Mitigation only Fix from $1,9502019-12-16 CRITICAL 9.8 CVE-2019-18189 A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker… Apex One Mitigation only Fix from $2,3002019-10-28 HIGH 7.5 CVE-2019-18187 KEVEPSS 25% Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files f… Officescan Mitigation only Fix from $1,9502019-10-28 HIGH 7.5 CVE-2019-18188 Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a s… Apex One Mitigation only Fix from $1,9502019-10-28 HIGH 7.1 CVE-2019-15627 Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability… Deep Security No fix yet Fix from $1,9502019-10-17 HIGH 7.8 CVE-2019-14685 A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate … Antivirus \+ Security 2019 No fix yet Fix from $1,9502019-08-21 HIGH 7.8 CVE-2019-14686 A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone … Antivirus \+ Security 2019 Mitigation only Fix from $1,9502019-08-21 HIGH 7.8 CVE-2019-14684 A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigne… Password Manager No fix yet Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-14687 A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigne… Password Manager Mitigation only Fix from $1,9502019-08-20 HIGH 8.8 CVE-2019-9490 A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative… Interscan Web Security Virtual Appliance Mitigation only Fix from $1,9502019-04-05 HIGH 7.5 CVE-2018-18332 A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modi… Officescan Mitigation only Fix from $1,9502018-12-21 HIGH 8.8 CVE-2018-10509 A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installatio… Officescan Mitigation only Fix from $1,9502018-06-12 HIGH 8.8 CVE-2018-10350EPSS 15% A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute … Smart Protection Server Mitigation only Fix from $1,9502018-05-25 HIGH 7.5 CVE-2018-6237EPSS 6% A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to manipulate the product to s… Smart Protection Server No fix yet Fix from $1,9502018-05-25 HIGH 8.8 CVE-2018-10357EPSS 73% A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulner… Endpoint Application Control Mitigation only Fix from $1,9502018-05-23