Trendmicro Security Vulnerabilities (CVEs)

This vulnerability allows remote attackers to download log files containing sensitive information from Trend Micro Mobile Security (Enterprise). Attac...

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widgets with authentication bypass vulnerabilities that allow remote attackers to chain with...

CVE-2023-32527 is a remote code execution vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 where vulnerable PHP files allow attackers...

This vulnerability allows authenticated users in Trend Micro Apex Central to perform SQL injection attacks that could lead to remote code execution. O...

This CVE describes a Time-of-Check Time-of-Use (TOCTOU) vulnerability in Trend Micro Apex One and Apex One as a Service agents that allows local attac...

CVE-2023-25069 is an improper access control vulnerability in TXOne StellarOne that allows authenticated low-privileged users to escalate their privil...

This CVE describes a local privilege escalation vulnerability in Trend Micro Apex One's scanning function. An attacker with low-privileged access can ...

This vulnerability in Trend Micro Apex One allows a local attacker with low-privileged access to escalate privileges by manipulating file links. Attac...

Trend Micro Security 2021 and 2022 (Consumer) contains an out-of-bounds read vulnerability that could allow an attacker to read sensitive information ...

Trend Micro Security 2021 and 2022 consumer versions contain an exposed dangerous method vulnerability that allows attackers to leak kernel memory add...

This vulnerability in Trend Micro Password Manager installer versions 3.7.0.1223 and below allows attackers to execute arbitrary code by placing malic...

This vulnerability allows a local attacker with existing low-privileged access to escalate privileges by loading a malicious DLL with incorrect permis...

This vulnerability in Trend Micro Password Manager allows a local attacker with low privileges to delete arbitrary folder contents with SYSTEM-level p...

This vulnerability in Trend Micro Antivirus for Mac allows attackers with low-level system privileges to create symbolic links that can lead to privil...

This vulnerability in Trend Micro Password Manager installer allows attackers to place malicious DLL files in specific directories, which the installe...

CVE-2022-25331 is a denial-of-service vulnerability in Trend Micro ServerProtection Information Server where uncaught exceptions allow remote attacker...

This vulnerability allows attackers to flood temporary log locations in Trend Micro security agents, consuming all disk space and causing denial-of-se...

This vulnerability allows a local attacker with low-privileged code execution to escalate privileges by creating mount points and deleting arbitrary f...

A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux allows authenticated attackers to r...

This vulnerability in Trend Micro Apex One allows a local attacker with initial low-privileged access to manipulate a specially crafted file and issue...

This vulnerability in Trend Micro Worry-Free Business Security allows a local attacker with low-privileged access to escalate privileges on affected s...

This is a local privilege escalation vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 that allows an attacker with low-privileged ac...

A null pointer dereference vulnerability in Trend Micro Apex One and Worry-Free Business Security allows attackers to crash the CGI program on affecte...

A stack-based buffer overflow vulnerability in Trend Micro Apex One and Worry-Free Business Security allows a local attacker with low-privileged code ...

This vulnerability allows a local attacker with low-privileged code execution to escalate privileges on Trend Micro Apex One installations. It affects...

This vulnerability allows a local attacker with low-privileged code execution on affected Trend Micro security products to escalate privileges to high...

This vulnerability allows a local attacker with low-privileged code execution on affected Trend Micro security products to escalate privileges to high...

This vulnerability allows a local attacker with low-privileged code execution on affected Trend Micro security products to escalate privileges via the...

This vulnerability allows local privilege escalation in Trend Micro security products. An attacker with low-privileged code execution can modify scrip...

This vulnerability allows authenticated attackers to upload arbitrary files to Trend Micro security products due to improper input validation. Attacke...

This vulnerability allows a local attacker with low-privileged access to escalate privileges and delete files with system-level permissions on Trend M...

This vulnerability allows a local attacker with low-privileged code execution to trigger a buffer overflow via integer truncation, leading to privileg...

CVE-2021-32460 is a local privilege escalation vulnerability in Trend Micro Maximum Security 2021 installer that allows attackers with existing local ...

This CVE describes a stack-based buffer overflow vulnerability in Trend Micro Home Network Security, allowing an attacker with low-privileged code exe...

This vulnerability in Trend Micro HouseCall for Home Networks installer allows local privilege escalation. An attacker with low-privileged access can ...

CVE-2021-31520 is a session token authentication bypass vulnerability in Trend Micro IM Security that allows remote attackers to guess administrators'...

Trend Micro Home Network Security 6.5.599 and earlier contains a file-parsing vulnerability that could allow an attacker to cause a denial-of-service ...

This vulnerability allows a local attacker with low-privileged access to escalate privileges on Trend Micro Apex One and OfficeScan XG SP1 installatio...

Trend Micro Password Manager 5 (Consumer) has a DLL hijacking vulnerability during installation that allows attackers to place malicious DLLs in insta...

This CVE describes an out-of-bounds write vulnerability in Trend Micro security products that allows a local attacker with low-privileged code executi...