Browse CVEs

HIGH 7.8 CVE-2026-45207 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is s… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-45208 A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. P… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-45206 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is s… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-34927 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please n… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-34928 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is s… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-34929 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is s… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-34930 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is s… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,9502026-05-21 MEDIUM 6.7 CVE-2026-34926 KEVEPSS 13% A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the s… Apex One 14.0.0.17079 / 14.0.20731+ Fix from $1,6002026-05-21 HIGH 7.8 CVE-2025-71214 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on… Apex One Mitigation only Fix from $1,9502026-05-21 HIGH 7.8 CVE-2025-71216 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges… Apex One Mitigation only Fix from $1,9502026-05-21 HIGH 7.8 CVE-2025-71217 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate p… Apex One Mitigation only Fix from $1,9502026-05-21 HIGH 7.0 CVE-2025-71215 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker t… Apex One Mitigation only Fix from $1,9502026-05-21 CRITICAL 9.8 CVE-2025-71210 A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affecte… Apex One 14.0.0.14136 / 14.0.20315+ Fix from $2,3002026-05-21 CRITICAL 9.8 CVE-2025-71211 A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affecte… Apex One 14.0.0.14136 / 14.0.20315+ Fix from $2,3002026-05-21 HIGH 7.8 CVE-2025-71212 A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.… Apex One 14.0.0.14136 / 14.0.20315+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2025-71213 An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Pl… Apex One 14.0.0.14136 / 14.0.20315+ Fix from $1,9502026-05-21 HIGH 7.5 CVE-2025-69259 A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition… Apex Central No fix yet Fix from $1,9502026-01-08 HIGH 7.5 CVE-2025-69260 A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affec… Apex Central No fix yet Fix from $1,9502026-01-08 CRITICAL 9.8 CVE-2025-69258 A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a ke… Apex Central Mitigation only Fix from $2,3002026-01-08 CRITICAL 9.8 CVE-2025-54987EPSS 17% A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and … Apex One Patch available Fix from $2,3002025-08-05 CRITICAL 9.8 CVE-2025-54948 KEVEPSS 21% A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and … Apex One Patch available Fix from $2,3002025-08-05 CRITICAL 9.8 CVE-2025-53378 A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attac… Worry Free Business Security Services 6.7.3954 / 14.3.1299+ Fix from $2,3002025-07-10 HIGH 7.8 CVE-2025-53503 Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privile… Cleaner One 6.8.333+ Fix from $1,9502025-07-10 HIGH 7.8 CVE-2025-52837 Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could … Password Manager 5.8.0.1330+ Fix from $1,9502025-07-10 HIGH 7.1 CVE-2025-52521 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to … Maximum Security 2022 Mitigation only Fix from $1,9502025-07-10 CRITICAL 9.8 CVE-2025-49213EPSS 10% An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on… Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-49216 An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin … Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-49217 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on… Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $2,3002025-06-17 HIGH 8.8 CVE-2025-49214 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution o… Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $1,9502025-06-17 HIGH 8.8 CVE-2025-49215 A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affecte… Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $1,9502025-06-17