trendmicro Vulnerability Advisory Catalog

Total 567 security vulnerabilities recorded for trendmicro software and firmware.

← Back to All Vendors
CVE-2025-49220 CRITICAL
Component: apex_central

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on a...

📅 2025-06-17
CVSS 9.8 Dossier →
CVE-2025-49219 CRITICAL
Component: apex_central

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on ...

📅 2025-06-17
CVSS 9.8 Dossier →
Component: apex_central

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary file...

📅 2025-06-17
CVSS 7.5 Dossier →
Component: apex_central

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary file...

📅 2025-06-17
CVSS 4.3 Dossier →
Component: apex_central

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution...

📅 2025-06-17
CVSS 7.5 Dossier →
Component: trend_vision_one

An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code. Please not...

📅 2025-04-02
CVSS 4.6 Dossier →
Component: trend_vision_one

A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create ...

📅 2025-04-02
CVSS 4.6 Dossier →
Component: trend_vision_one

A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create use...

📅 2025-04-02
CVSS 4.6 Dossier →
Component: trend_vision_one

A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to create...

📅 2025-04-02
CVSS 4.6 Dossier →
Component: trend_vision_one

A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to crea...

📅 2025-04-02
CVSS 4.6 Dossier →
Component: apex_one

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security an...

📅 2025-03-25
CVSS 7.3 Dossier →
Component: apex_one

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security an...

📅 2025-03-25
CVSS 7.3 Dossier →
Component: housecall_for_home_networks

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an att...

📅 2025-02-22
CVSS 7.3 Dossier →
Component: deep_security_agent

An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a...

📅 2024-12-31
CVSS 6.7 Dossier →
Component: apex_one

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Ple...

📅 2024-12-31
CVSS 7.8 Dossier →
Component: apex_one

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. ...

📅 2024-12-31
CVSS 7.8 Dossier →
Component: apex_one

An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Pleas...

📅 2024-12-31
CVSS 7.8 Dossier →
Component: id_security

Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email verification...

📅 2024-12-31
CVSS 6.5 Dossier →
Component: apex_one

A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installation...

📅 2024-12-31
CVSS 7.8 Dossier →
Component: apex_one

A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This v...

📅 2024-12-31
CVSS 7.8 Dossier →
Component: apex_one

A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This v...

📅 2024-12-31
CVSS 7.8 Dossier →
Component: apex_one

A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations....

📅 2024-12-31
CVSS 7.5 Dossier →
Component: deep_security_agent

A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges ...

📅 2024-11-19
CVSS 8.0 Dossier →
CVE-2024-48904 CRITICAL
Component: cloud_edge

An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please...

📅 2024-10-22
CVSS 9.8 Dossier →
Page 3 of 24 (567 Total Records)