Vulnerability index

Browse CVEs

541 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Apex Central MEDIUM 6.1
CVE-2023-32535

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to…

Patch available
Fix from $1,600 2023-06-26
Apex One MEDIUM 5.5
CVE-2023-32556

A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive informa…

Fix: 14.0.12105+
Fix from $1,600 2023-06-26
Apex Central MEDIUM 5.4
CVE-2023-32536

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to…

Patch available
Fix from $1,600 2023-06-26
Apex Central MEDIUM 5.4
CVE-2023-32537

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to…

Patch available
Fix from $1,600 2023-06-26
Apex One MEDIUM 5.3
CVE-2023-32552

An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumst…

Fix: 14.0.12105+
Fix from $1,600 2023-06-26
Apex One MEDIUM 5.3
CVE-2023-32553

An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumst…

Fix: 14.0.12105+
Fix from $1,600 2023-06-26
Antivirus\+ Security 2021 HIGH 7.8
CVE-2023-28929

Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific …

Fix: after 17.7.1476
Fix from $1,950 2023-06-26
Apex One MEDIUM 5.5
CVE-2023-30902

A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally dele…

Fix: 14.0.12105+
Fix from $1,600 2023-06-26
Trend Micro Endpoint Encryption MEDIUM 6.8
CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to …

Fix: after 6.0.0.3204
Fix from $1,600 2023-03-22
Txone Stellarone HIGH 8.8
CVE-2023-25069

TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, fa…

Fix: 2.0.1160+
Fix from $1,950 2023-03-22
Apex One HIGH 7.8
CVE-2023-25145

A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected…

Fix: 14.0.11960+
Fix from $1,950 2023-03-10
Apex One HIGH 7.8
CVE-2023-25146

A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the origina…

Fix: 14.0.11960+
Fix from $1,950 2023-03-10
Apex One HIGH 7.8
CVE-2023-25148

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specifi…

Fix: 14.0.11960+
Fix from $1,950 2023-03-10
Apex One MEDIUM 6.7
CVE-2023-25147

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the pr…

Fix: 14.0.11960+
Fix from $1,600 2023-03-10
Apex One CRITICAL 9.8
CVE-2023-25143

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execu…

Fix: 14.0.11960+
Fix from $2,300 2023-03-10
Apex One HIGH 7.8
CVE-2023-25144

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitr…

Fix: 14.0.11960+
Fix from $1,950 2023-03-10
Apex One CRITICAL 9.1
CVE-2023-0587EPSS 60%

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent…

Mitigation only
Fix from $2,300 2023-02-01
Maximum Security 2022 HIGH 7.0
CVE-2022-48191

A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific…

Patch available
Fix from $1,950 2023-01-20
Apex One HIGH 7.8
CVE-2022-45798

A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a loc…

Mitigation only
Fix from $1,950 2022-12-24
Apex One HIGH 7.8
CVE-2022-44649

An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a l…

Fix: 14.0.11789+
Fix from $1,950 2022-12-12
Apex One HIGH 7.8
CVE-2022-44650

A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local…

Fix: 14.0.11789+
Fix from $1,950 2022-12-12
Apex One HIGH 7.8
CVE-2022-44652

An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escala…

Fix: 14.0.11789+
Fix from $1,950 2022-12-12
Apex One HIGH 7.8
CVE-2022-44653

A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privile…

Fix: 14.0.11789+
Fix from $1,950 2022-12-12
Apex One HIGH 7.5
CVE-2022-44654

Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory pro…

Fix: 14.0.11789+
Fix from $1,950 2022-12-12
Apex One HIGH 7.0
CVE-2022-44651

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privil…

Fix: 14.0.11789+
Fix from $1,950 2022-12-12
Apex One MEDIUM 5.5
CVE-2022-44647

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information …

Fix: 14.0.11789+
Fix from $1,600 2022-12-12
Apex One MEDIUM 5.5
CVE-2022-44648

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information …

Fix: 14.0.11789+
Fix from $1,600 2022-12-12
Apex One HIGH 7.1
CVE-2022-45797

An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could a…

Mitigation only
Fix from $1,950 2022-12-12
Apex One HIGH 7.8
CVE-2022-41749

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations…

Patch available
Fix from $1,950 2022-10-10
Apex One MEDIUM 6.7
CVE-2022-41748

A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with administrative c…

Patch available
Fix from $1,600 2022-10-10