trendmicro Vulnerability Advisory Catalog

Total 567 security vulnerabilities recorded for trendmicro software and firmware.

← Back to All Vendors
Component: maximum_security_2022

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to u...

📅 2025-07-10
CVSS 7.8 Dossier →
Component: maximum_security_2022

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to u...

📅 2025-06-17
CVSS 7.8 Dossier →
Component: maximum_security_2022

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to u...

📅 2025-06-17
CVSS 7.8 Dossier →
Component: trend_micro_endpoint_encryption

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected...

📅 2025-06-17
CVSS 7.7 Dossier →
CVE-2025-49217 CRITICAL
Component: trend_micro_endpoint_encryption

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on ...

📅 2025-06-17
CVSS 9.8 Dossier →
CVE-2025-49216 CRITICAL
Component: trend_micro_endpoint_encryption

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin u...

📅 2025-06-17
CVSS 9.8 Dossier →
Component: trend_micro_endpoint_encryption

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected...

📅 2025-06-17
CVSS 8.8 Dossier →
Component: trend_micro_endpoint_encryption

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on...

📅 2025-06-17
CVSS 8.8 Dossier →
CVE-2025-49213 CRITICAL
Component: trend_micro_endpoint_encryption

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on ...

📅 2025-06-17
CVSS 9.8 Dossier →
CVE-2025-49212 CRITICAL
Component: trend_micro_endpoint_encryption

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on ...

📅 2025-06-17
CVSS 9.8 Dossier →
Component: trend_micro_endpoint_encryption

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installat...

📅 2025-06-17
CVSS 7.7 Dossier →
Component: password_manager

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that c...

📅 2025-06-17
CVSS 6.7 Dossier →
Component: deep_security_agent

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on ...

📅 2025-06-17
CVSS 5.5 Dossier →
Component: deep_security_agent

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate ...

📅 2025-06-17
CVSS 7.8 Dossier →
Component: deep_security_agent

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations....

📅 2025-06-17
CVSS 7.8 Dossier →
Component: apex_central

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading...

📅 2025-06-17
CVSS 7.1 Dossier →
Component: apex_central

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate ce...

📅 2025-06-17
CVSS 6.5 Dossier →
Component: apex_central

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate ce...

📅 2025-06-17
CVSS 6.5 Dossier →
Component: worry-free_business_security_services

An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with p...

📅 2025-06-17
CVSS 6.8 Dossier →
Component: apex_one

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected...

📅 2025-06-17
CVSS 6.7 Dossier →
Component: apex_one

A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected ins...

📅 2025-06-17
CVSS 7.8 Dossier →
Component: apex_one

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations...

📅 2025-06-17
CVSS 7.0 Dossier →
Component: apex_one

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code lea...

📅 2025-06-17
CVSS 8.8 Dossier →
Component: worry-free_business_security

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrit...

📅 2025-06-17
CVSS 8.7 Dossier →
Page 2 of 24 (567 Total Records)