trendmicro Vulnerability Advisory Catalog

Total 567 security vulnerabilities recorded for trendmicro software and firmware.

← Back to All Vendors
Component: deep_security_agent

An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected install...

📅 2024-10-22
CVSS 7.8 Dossier →
Component: deep_discovery_inspector

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affecte...

📅 2024-10-22
CVSS 6.5 Dossier →
Component: deep_discovery_inspector

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affecte...

📅 2024-10-22
CVSS 8.4 Dossier →
Component: antivirus_one

Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow...

📅 2024-10-22
CVSS 8.4 Dossier →
Component: antivirus_one

Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access...

📅 2024-10-22
CVSS 7.8 Dossier →
Component: vpn

Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privi...

📅 2024-10-22
CVSS 7.8 Dossier →
Component: apex_one

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. P...

📅 2024-10-22
CVSS 7.5 Dossier →
Component: apex_one

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Ple...

📅 2024-06-10
CVSS 7.8 Dossier →
Component: vpn_proxy_one

Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial...

📅 2024-06-10
CVSS 5.3 Dossier →
Component: interscan_web_security_virtual_appliance

A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate pri...

📅 2024-06-10
CVSS 5.4 Dossier →
Component: deep_security_agent

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on...

📅 2024-06-10
CVSS 7.8 Dossier →
Component: apex_one

A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive inf...

📅 2024-06-10
CVSS 4.7 Dossier →
Component: apex_one

A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a de...

📅 2024-06-10
CVSS 6.1 Dossier →
Component: apex_one

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. ...

📅 2024-06-10
CVSS 7.8 Dossier →
Component: apex_one

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privile...

📅 2024-06-10
CVSS 7.8 Dossier →
Component: apex_one

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installa...

📅 2024-06-10
CVSS 7.8 Dossier →
Component: apex_one

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installa...

📅 2024-06-10
CVSS 7.8 Dossier →
Component: maximum_security_2022

Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete...

📅 2024-06-10
CVSS 7.8 Dossier →
Component: air_support

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hij...

📅 2024-01-29
CVSS 7.8 Dossier →
Component: deep_security

A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a lo...

📅 2024-01-23
CVSS 7.8 Dossier →
Component: deep_security

An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allo...

📅 2024-01-23
CVSS 7.8 Dossier →
Component: apex_central

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or...

📅 2024-01-23
CVSS 7.1 Dossier →
Component: apex_one

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of ...

📅 2024-01-23
CVSS 6.1 Dossier →
Component: apex_central

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to ...

📅 2024-01-23
CVSS 6.1 Dossier →
Page 4 of 24 (567 Total Records)