https://vulnogram.org/ Most recent CVEs assigned by Trend Micro, Inc. (trendmicro). https://vulnogram.org/seaview/icons/trendmicro.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-45208 https://vulnogram.org/CVE-2026-45208 A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target sys… High Thu, 21 May 2026 13:04:35 GMT https://vulnogram.org/CVE-2026-45207 https://vulnogram.org/CVE-2026-45207 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please… High Thu, 21 May 2026 13:04:25 GMT https://vulnogram.org/CVE-2026-45206 https://vulnogram.org/CVE-2026-45206 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please… High Thu, 21 May 2026 13:04:15 GMT https://vulnogram.org/CVE-2026-34930 https://vulnogram.org/CVE-2026-34930 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an atta… High Thu, 21 May 2026 13:04:02 GMT https://vulnogram.org/CVE-2026-34929 https://vulnogram.org/CVE-2026-34929 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note… High Thu, 21 May 2026 13:03:50 GMT https://vulnogram.org/CVE-2026-34928 https://vulnogram.org/CVE-2026-34928 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: a… High Thu, 21 May 2026 13:03:39 GMT https://vulnogram.org/CVE-2026-34927 https://vulnogram.org/CVE-2026-34927 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in… High Thu, 21 May 2026 13:03:31 GMT https://vulnogram.org/CVE-2026-34926 https://vulnogram.org/CVE-2026-34926 A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is o… Medium Known Exploited Thu, 21 May 2026 13:03:21 GMT https://vulnogram.org/CVE-2025-71217 https://vulnogram.org/CVE-2025-71217 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execut… High Cloud Hosted Thu, 21 May 2026 13:03:01 GMT https://vulnogram.org/CVE-2025-71216 https://vulnogram.org/CVE-2025-71216 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-pri… High Cloud Hosted Thu, 21 May 2026 13:02:52 GMT https://vulnogram.org/CVE-2025-71215 https://vulnogram.org/CVE-2025-71215 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili… High Cloud Hosted Thu, 21 May 2026 13:02:41 GMT https://vulnogram.org/CVE-2025-71214 https://vulnogram.org/CVE-2025-71214 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privil… High Cloud Hosted Thu, 21 May 2026 13:02:30 GMT https://vulnogram.org/CVE-2025-71213 https://vulnogram.org/CVE-2025-71213 An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system… High Thu, 21 May 2026 13:02:20 GMT https://vulnogram.org/CVE-2025-71212 https://vulnogram.org/CVE-2025-71212 A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target… High Thu, 21 May 2026 13:02:11 GMT https://vulnogram.org/CVE-2025-71211 https://vulnogram.org/CVE-2025-71211 A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different exe… Critical Network Exploitable Thu, 21 May 2026 13:02:02 GMT https://vulnogram.org/CVE-2025-71210 https://vulnogram.org/CVE-2025-71210 A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, t… Critical Network Exploitable Thu, 21 May 2026 13:01:53 GMT https://vulnogram.org/CVE-2025-69260 https://vulnogram.org/CVE-2025-69260 A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability… High Network Exploitable Thu, 08 Jan 2026 12:50:55 GMT https://vulnogram.org/CVE-2025-69259 https://vulnogram.org/CVE-2025-69259 A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vuln… High Network Exploitable Thu, 08 Jan 2026 12:50:43 GMT https://vulnogram.org/CVE-2025-69258 https://vulnogram.org/CVE-2025-69258 A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected… Critical Network Exploitable Thu, 08 Jan 2026 12:50:25 GMT https://vulnogram.org/CVE-2025-54987 https://vulnogram.org/CVE-2025-54987 A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54… Critical Network Exploitable Tue, 05 Aug 2025 13:00:38 GMT https://vulnogram.org/CVE-2025-54948 https://vulnogram.org/CVE-2025-54948 A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. Critical Known Exploited Network Exploitable Tue, 05 Aug 2025 13:00:19 GMT https://vulnogram.org/CVE-2025-53503 https://vulnogram.org/CVE-2025-53503 Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own. High Thu, 10 Jul 2025 18:59:17 GMT https://vulnogram.org/CVE-2025-53378 https://vulnogram.org/CVE-2025-53378 A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability on… High Network Exploitable Cloud Hosted Thu, 10 Jul 2025 18:58:55 GMT https://vulnogram.org/CVE-2025-52837 https://vulnogram.org/CVE-2025-52837 Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportunity to abuse symbolic links and other methods to delete any file/folder… High Thu, 10 Jul 2025 18:57:50 GMT https://vulnogram.org/CVE-2025-52521 https://vulnogram.org/CVE-2025-52521 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own. High Thu, 10 Jul 2025 18:57:25 GMT https://vulnogram.org/CVE-2025-49385 https://vulnogram.org/CVE-2025-49385 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own. High Tue, 17 Jun 2025 20:40:29 GMT https://vulnogram.org/CVE-2025-49384 https://vulnogram.org/CVE-2025-49384 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own. High Tue, 17 Jun 2025 20:40:21 GMT https://vulnogram.org/CVE-2025-48443 https://vulnogram.org/CVE-2025-48443 Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an admi… Medium Tue, 17 Jun 2025 20:34:35 GMT https://vulnogram.org/CVE-2025-49218 https://vulnogram.org/CVE-2025-49218 A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215. Please note: an attacker mu… High Tue, 17 Jun 2025 20:28:22 GMT https://vulnogram.org/CVE-2025-49217 https://vulnogram.org/CVE-2025-49217 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a differ… Critical Network Exploitable Tue, 17 Jun 2025 20:28:14 GMT https://vulnogram.org/CVE-2025-49216 https://vulnogram.org/CVE-2025-49216 An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations. Critical Network Exploitable Tue, 17 Jun 2025 20:28:07 GMT https://vulnogram.org/CVE-2025-49215 https://vulnogram.org/CVE-2025-49215 A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged cod… High Tue, 17 Jun 2025 20:28:00 GMT https://vulnogram.org/CVE-2025-49214 https://vulnogram.org/CVE-2025-49214 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Please note: an attacker must first obtain the ability to execute low-privi… High Tue, 17 Jun 2025 20:27:52 GMT https://vulnogram.org/CVE-2025-49213 https://vulnogram.org/CVE-2025-49213 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a differ… Critical Network Exploitable Tue, 17 Jun 2025 20:27:44 GMT https://vulnogram.org/CVE-2025-49212 https://vulnogram.org/CVE-2025-49212 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a differ… Critical Network Exploitable Tue, 17 Jun 2025 20:27:37 GMT https://vulnogram.org/CVE-2025-49211 https://vulnogram.org/CVE-2025-49211 A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the t… High Tue, 17 Jun 2025 20:16:38 GMT https://vulnogram.org/CVE-2025-30642 https://vulnogram.org/CVE-2025-30642 A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privil… Medium Tue, 17 Jun 2025 20:11:03 GMT https://vulnogram.org/CVE-2025-30641 https://vulnogram.org/CVE-2025-30641 A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to exec… High Tue, 17 Jun 2025 20:10:54 GMT https://vulnogram.org/CVE-2025-30640 https://vulnogram.org/CVE-2025-30640 A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target… High Tue, 17 Jun 2025 20:10:21 GMT https://vulnogram.org/CVE-2025-30680 https://vulnogram.org/CVE-2025-30680 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects t… High Cloud Hosted Tue, 17 Jun 2025 19:56:23 GMT https://vulnogram.org/CVE-2025-30679 https://vulnogram.org/CVE-2025-30679 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Medium Network Exploitable Tue, 17 Jun 2025 19:56:11 GMT https://vulnogram.org/CVE-2025-30678 https://vulnogram.org/CVE-2025-30678 A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Medium Network Exploitable Tue, 17 Jun 2025 19:56:01 GMT https://vulnogram.org/CVE-2025-49487 https://vulnogram.org/CVE-2025-49487 An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations. An attacker must ha… Medium Cloud Hosted Tue, 17 Jun 2025 18:43:11 GMT https://vulnogram.org/CVE-2025-49158 https://vulnogram.org/CVE-2025-49158 An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged cod… Medium Tue, 17 Jun 2025 18:42:56 GMT https://vulnogram.org/CVE-2025-49157 https://vulnogram.org/CVE-2025-49157 A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on… High Tue, 17 Jun 2025 18:42:49 GMT https://vulnogram.org/CVE-2025-49156 https://vulnogram.org/CVE-2025-49156 A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the targe… High Tue, 17 Jun 2025 18:42:39 GMT https://vulnogram.org/CVE-2025-49155 https://vulnogram.org/CVE-2025-49155 An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations. High Network Exploitable Tue, 17 Jun 2025 18:42:31 GMT https://vulnogram.org/CVE-2025-49154 https://vulnogram.org/CVE-2025-49154 An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability o… High Tue, 17 Jun 2025 18:42:10 GMT https://vulnogram.org/CVE-2025-49220 https://vulnogram.org/CVE-2025-49220 An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49219 but is in a differe… Critical Network Exploitable Tue, 17 Jun 2025 17:43:23 GMT https://vulnogram.org/CVE-2025-49219 https://vulnogram.org/CVE-2025-49219 An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a differ… Critical Network Exploitable Tue, 17 Jun 2025 17:43:12 GMT