Trend Micro vulnerabilities
496 CVEs and advisories name Trend Micro as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45208A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installa
- CVE-2026-45207An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
- CVE-2026-45206An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
- CVE-2026-34930An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
- CVE-2026-34929An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
- CVE-2026-34928An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
- CVE-2026-34927An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
- CVE-2026-34926A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table
- CVE-2025-71217An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to e
- CVE-2025-71216A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate p
- CVE-2025-71215A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local a
- CVE-2025-71214An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate priv
- CVE-2025-71213An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio
- CVE-2025-71212A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected insta
- CVE-2025-71211A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands o
- CVE-2025-71210A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands o
- CVE-2025-69260A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition
- CVE-2025-69259A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service
- CVE-2025-69258A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL
- CVE-2025-54987A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious
- CVE-2025-54948A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious
- CVE-2025-53503Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delet
- CVE-2025-53378A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthentica
- CVE-2025-52837Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability th
- CVE-2025-52521Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att
- CVE-2025-49385Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att
- CVE-2025-49384Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att
- CVE-2025-48443Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerabil
- CVE-2025-49218A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges o
- CVE-2025-49217An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe