Browse CVEs

MEDIUM 6.1 CVE-2023-32535 Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to… Apex Central Patch available Fix from $1,6002023-06-26 MEDIUM 5.5 CVE-2023-32556 A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive informa… Apex One 14.0.12105+ Fix from $1,6002023-06-26 MEDIUM 5.4 CVE-2023-32536 Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to… Apex Central Patch available Fix from $1,6002023-06-26 MEDIUM 5.4 CVE-2023-32537 Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to… Apex Central Patch available Fix from $1,6002023-06-26 MEDIUM 5.3 CVE-2023-32552 An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumst… Apex One 14.0.12105+ Fix from $1,6002023-06-26 MEDIUM 5.3 CVE-2023-32553 An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumst… Apex One 14.0.12105+ Fix from $1,6002023-06-26 HIGH 7.8 CVE-2023-28929 Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific … Antivirus\+ Security 2021 after 17.7.1476 Fix from $1,9502023-06-26 MEDIUM 5.5 CVE-2023-30902 A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally dele… Apex One 14.0.12105+ Fix from $1,6002023-06-26 MEDIUM 6.8 CVE-2023-28005 A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to … Trend Micro Endpoint Encryption after 6.0.0.3204 Fix from $1,6002023-03-22 HIGH 8.8 CVE-2023-25069 TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, fa… Txone Stellarone 2.0.1160+ Fix from $1,9502023-03-22 HIGH 7.8 CVE-2023-25145 A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected… Apex One 14.0.11960+ Fix from $1,9502023-03-10 HIGH 7.8 CVE-2023-25146 A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the origina… Apex One 14.0.11960+ Fix from $1,9502023-03-10 HIGH 7.8 CVE-2023-25148 A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specifi… Apex One 14.0.11960+ Fix from $1,9502023-03-10 MEDIUM 6.7 CVE-2023-25147 An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the pr… Apex One 14.0.11960+ Fix from $1,6002023-03-10 CRITICAL 9.8 CVE-2023-25143 An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execu… Apex One 14.0.11960+ Fix from $2,3002023-03-10 HIGH 7.8 CVE-2023-25144 An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitr… Apex One 14.0.11960+ Fix from $1,9502023-03-10 CRITICAL 9.1 CVE-2023-0587EPSS 60% A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent… Apex One Mitigation only Fix from $2,3002023-02-01 HIGH 7.0 CVE-2022-48191 A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific… Maximum Security 2022 Patch available Fix from $1,9502023-01-20 HIGH 7.8 CVE-2022-45798 A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a loc… Apex One Mitigation only Fix from $1,9502022-12-24 HIGH 7.8 CVE-2022-44649 An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a l… Apex One 14.0.11789+ Fix from $1,9502022-12-12 HIGH 7.8 CVE-2022-44650 A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local… Apex One 14.0.11789+ Fix from $1,9502022-12-12 HIGH 7.8 CVE-2022-44652 An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escala… Apex One 14.0.11789+ Fix from $1,9502022-12-12 HIGH 7.8 CVE-2022-44653 A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privile… Apex One 14.0.11789+ Fix from $1,9502022-12-12 HIGH 7.5 CVE-2022-44654 Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory pro… Apex One 14.0.11789+ Fix from $1,9502022-12-12 HIGH 7.0 CVE-2022-44651 A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privil… Apex One 14.0.11789+ Fix from $1,9502022-12-12 MEDIUM 5.5 CVE-2022-44647 An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information … Apex One 14.0.11789+ Fix from $1,6002022-12-12 MEDIUM 5.5 CVE-2022-44648 An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information … Apex One 14.0.11789+ Fix from $1,6002022-12-12 HIGH 7.1 CVE-2022-45797 An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could a… Apex One Mitigation only Fix from $1,9502022-12-12 HIGH 7.8 CVE-2022-41749 An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations… Apex One Patch available Fix from $1,9502022-10-10 MEDIUM 6.7 CVE-2022-41748 A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with administrative c… Apex One Patch available Fix from $1,6002022-10-10