Browse CVEs

HIGH 7.8 CVE-2025-49218 A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affecte… Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $1,9502025-06-17 HIGH 7.1 CVE-2025-49384 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to … Maximum Security 2022 Mitigation only Fix from $1,9502025-06-17 HIGH 7.1 CVE-2025-49385 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to … Maximum Security 2022 Mitigation only Fix from $1,9502025-06-17 CRITICAL 9.8 CVE-2025-49212EPSS 10% An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on… Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $2,3002025-06-17 HIGH 7.8 CVE-2025-49211 A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installa… Trend Micro Endpoint Encryption 6.0.0.4013+ Fix from $1,9502025-06-17 MEDIUM 6.6 CVE-2025-48443 Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that … Password Manager 5.8.0.1330+ Fix from $1,6002025-06-17 HIGH 7.8 CVE-2025-30640 A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations… Deep Security Agent 20.0.1+ Fix from $1,9502025-06-17 HIGH 7.8 CVE-2025-30641 A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate… Deep Security Agent 20.0.1+ Fix from $1,9502025-06-17 MEDIUM 5.5 CVE-2025-30642 A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on… Deep Security Agent 20.0.1+ Fix from $1,6002025-06-17 HIGH 7.5 CVE-2025-30678 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate c… Apex Central Mitigation only Fix from $1,9502025-06-17 HIGH 7.5 CVE-2025-30679 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate c… Apex Central Mitigation only Fix from $1,9502025-06-17 HIGH 7.1 CVE-2025-30680 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leadin… Apex Central 2025-03-01+ Fix from $1,9502025-06-17 MEDIUM 6.8 CVE-2025-49487 An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with … Worry Free Business Security Services 6.7.3954 / 14.3.1299+ Fix from $1,6002025-06-17 HIGH 8.8 CVE-2025-49155 An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code le… Apex One 14.0.0.14002 / 14.0.14492+ Fix from $1,9502025-06-17 HIGH 7.8 CVE-2025-49154 An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwri… Worry Free Business Security 6.7.3954 / 14.0.0.14002+ Fix from $1,9502025-06-17 HIGH 7.8 CVE-2025-49156 A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installation… Apex One 14.0.0.14002 / 14.0.14492+ Fix from $1,9502025-06-17 HIGH 7.8 CVE-2025-49157 A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected in… Apex One 14.0.0.14002 / 14.0.14492+ Fix from $1,9502025-06-17 HIGH 7.8 CVE-2025-49158 An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affecte… Apex One 14.0.0.14002 / 14.0.14492+ Fix from $1,9502025-06-17 CRITICAL 9.8 CVE-2025-49220 An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on … Apex Central Mitigation only Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-47865 A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code executio… Apex Central Mitigation only Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-47867 A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary fil… Apex Central Mitigation only Fix from $2,3002025-06-17 CRITICAL 9.8 CVE-2025-49219 An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on… Apex Central Mitigation only Fix from $2,3002025-06-17 HIGH 7.5 CVE-2025-47866 An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary fil… Apex Central Mitigation only Fix from $1,9502025-06-17 CRITICAL 9.0 CVE-2025-31286 An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code. Please no… Trend Vision One Mitigation only Fix from $2,3002025-04-02 HIGH 7.2 CVE-2025-31284 A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create us… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.2 CVE-2025-31285 A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.2 CVE-2025-31283 A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to creat… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.2 CVE-2025-31282 A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to cre… Trend Vision One Mitigation only Fix from $1,9502025-04-02 HIGH 7.8 CVE-2024-58104 A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security a… Apex One 14.0.14203 / 2019.13140+ Fix from $1,9502025-03-25 HIGH 7.8 CVE-2024-58105 A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security a… Apex One 14.0.14203 / 2019.13140+ Fix from $1,9502025-03-25