# cve.now: Trend Micro

The newest entries naming Trend Micro as an affected vendor (up to 200), of 496 in all, 12 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-45208](https://cve.now/CVE-2026-45208.md): A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installa (CVSS 7.8)
- [CVE-2026-45207](https://cve.now/CVE-2026-45207.md): An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. (CVSS 7.8)
- [CVE-2026-45206](https://cve.now/CVE-2026-45206.md): An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. (CVSS 7.8)
- [CVE-2026-34930](https://cve.now/CVE-2026-34930.md): An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. (CVSS 7.8)
- [CVE-2026-34929](https://cve.now/CVE-2026-34929.md): An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. (CVSS 7.8)
- [CVE-2026-34928](https://cve.now/CVE-2026-34928.md): An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. (CVSS 7.8)
- [CVE-2026-34927](https://cve.now/CVE-2026-34927.md): An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. (CVSS 7.8)
- [CVE-2026-34926](https://cve.now/CVE-2026-34926.md): A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table (CVSS 6.7, KEV)
- [CVE-2025-71217](https://cve.now/CVE-2025-71217.md): An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to e (CVSS 7.8)
- [CVE-2025-71216](https://cve.now/CVE-2025-71216.md): A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate p (CVSS 7.8)
- [CVE-2025-71215](https://cve.now/CVE-2025-71215.md): A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local a (CVSS 7.0)
- [CVE-2025-71214](https://cve.now/CVE-2025-71214.md): An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate priv (CVSS 7.8)
- [CVE-2025-71213](https://cve.now/CVE-2025-71213.md): An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio (CVSS 7.8)
- [CVE-2025-71212](https://cve.now/CVE-2025-71212.md): A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected insta (CVSS 7.8)
- [CVE-2025-71211](https://cve.now/CVE-2025-71211.md): A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands o (CVSS 9.8)
- [CVE-2025-71210](https://cve.now/CVE-2025-71210.md): A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands o (CVSS 9.8)
- [CVE-2025-69260](https://cve.now/CVE-2025-69260.md): A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition (CVSS 7.5)
- [CVE-2025-69259](https://cve.now/CVE-2025-69259.md): A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service (CVSS 7.5)
- [CVE-2025-69258](https://cve.now/CVE-2025-69258.md): A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL (CVSS 9.8)
- [CVE-2025-54987](https://cve.now/CVE-2025-54987.md): A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious (CVSS 9.4)
- [CVE-2025-54948](https://cve.now/CVE-2025-54948.md): A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious (CVSS 9.4, KEV)
- [CVE-2025-53503](https://cve.now/CVE-2025-53503.md): Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delet (CVSS 7.8)
- [CVE-2025-53378](https://cve.now/CVE-2025-53378.md): A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthentica (CVSS 7.6)
- [CVE-2025-52837](https://cve.now/CVE-2025-52837.md): Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability th (CVSS 7.8)
- [CVE-2025-52521](https://cve.now/CVE-2025-52521.md): Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att (CVSS 7.8)
- [CVE-2025-49385](https://cve.now/CVE-2025-49385.md): Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att (CVSS 7.8)
- [CVE-2025-49384](https://cve.now/CVE-2025-49384.md): Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att (CVSS 7.8)
- [CVE-2025-48443](https://cve.now/CVE-2025-48443.md): Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerabil (CVSS 6.7)
- [CVE-2025-49218](https://cve.now/CVE-2025-49218.md): A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges o (CVSS 7.7)
- [CVE-2025-49217](https://cve.now/CVE-2025-49217.md): An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe (CVSS 9.8)
- [CVE-2025-49216](https://cve.now/CVE-2025-49216.md): An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as (CVSS 9.8)
- [CVE-2025-49215](https://cve.now/CVE-2025-49215.md): A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges o (CVSS 8.8)
- [CVE-2025-49214](https://cve.now/CVE-2025-49214.md): An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code ex (CVSS 8.8)
- [CVE-2025-49213](https://cve.now/CVE-2025-49213.md): An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe (CVSS 9.8)
- [CVE-2025-49212](https://cve.now/CVE-2025-49212.md): An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe (CVSS 9.8)
- [CVE-2025-49211](https://cve.now/CVE-2025-49211.md): A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected (CVSS 7.7)
- [CVE-2025-30642](https://cve.now/CVE-2025-30642.md): A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) sit (CVSS 5.5)
- [CVE-2025-30641](https://cve.now/CVE-2025-30641.md): A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to (CVSS 7.8)
- [CVE-2025-30640](https://cve.now/CVE-2025-30640.md): A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected inst (CVSS 7.8)
- [CVE-2025-30680](https://cve.now/CVE-2025-30680.md): A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain paramete (CVSS 7.5)
- [CVE-2025-30679](https://cve.now/CVE-2025-30679.md): A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to man (CVSS 6.5)
- [CVE-2025-30678](https://cve.now/CVE-2025-30678.md): A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to man (CVSS 6.5)
- [CVE-2025-49487](https://cve.now/CVE-2025-49487.md): An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attac (CVSS 6.8)
- [CVE-2025-49158](https://cve.now/CVE-2025-49158.md): An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges o (CVSS 6.7)
- [CVE-2025-49157](https://cve.now/CVE-2025-49157.md): A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on af (CVSS 7.8)
- [CVE-2025-49156](https://cve.now/CVE-2025-49156.md): A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected ins (CVSS 7.0)
- [CVE-2025-49155](https://cve.now/CVE-2025-49155.md): An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject maliciou (CVSS 8.8)
- [CVE-2025-49154](https://cve.now/CVE-2025-49154.md): An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker t (CVSS 8.7)
- [CVE-2025-49220](https://cve.now/CVE-2025-49220.md): An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code exec (CVSS 9.8)
- [CVE-2025-49219](https://cve.now/CVE-2025-49219.md): An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code exe (CVSS 9.8)
- [CVE-2025-47867](https://cve.now/CVE-2025-47867.md): A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbi (CVSS 7.5)
- [CVE-2025-47866](https://cve.now/CVE-2025-47866.md): An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbi (CVSS 4.3)
- [CVE-2025-47865](https://cve.now/CVE-2025-47865.md): A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code (CVSS 7.5)
- [CVE-2025-31286](https://cve.now/CVE-2025-31286.md): An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code. (CVSS 4.6)
- [CVE-2025-31285](https://cve.now/CVE-2025-31285.md): A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator (CVSS 4.6)
- [CVE-2025-31284](https://cve.now/CVE-2025-31284.md): A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to (CVSS 4.6)
- [CVE-2025-31283](https://cve.now/CVE-2025-31283.md): A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator (CVSS 4.6)
- [CVE-2025-31282](https://cve.now/CVE-2025-31282.md): A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrat (CVSS 4.6)
- [CVE-2024-58105](https://cve.now/CVE-2024-58105.md): A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s (CVSS 7.3)
- [CVE-2024-58104](https://cve.now/CVE-2024-58104.md): A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s (CVSS 7.3)
- [CVE-2022-28339](https://cve.now/CVE-2022-28339.md): Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could al (CVSS 7.3)
- [CVE-2024-55955](https://cve.now/CVE-2024-55955.md): An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 cou (CVSS 6.7)
- [CVE-2024-55917](https://cve.now/CVE-2024-55917.md): An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio (CVSS 7.8)
- [CVE-2024-55632](https://cve.now/CVE-2024-55632.md): A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected instal (CVSS 7.8)
- [CVE-2024-55631](https://cve.now/CVE-2024-55631.md): An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations (CVSS 7.8)
- [CVE-2024-53647](https://cve.now/CVE-2024-53647.md): Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email ve (CVSS 6.5)
- [CVE-2024-52050](https://cve.now/CVE-2024-52050.md): A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected in (CVSS 7.8)
- [CVE-2024-52049](https://cve.now/CVE-2024-52049.md): A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio (CVSS 7.8)
- [CVE-2024-52048](https://cve.now/CVE-2024-52048.md): A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio (CVSS 7.8)
- [CVE-2024-52047](https://cve.now/CVE-2024-52047.md): A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected inst (CVSS 7.5)
- [CVE-2024-51503](https://cve.now/CVE-2024-51503.md): A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate p (CVSS 8.0)
- [CVE-2024-48904](https://cve.now/CVE-2024-48904.md): An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. (CVSS 9.8)
- [CVE-2024-48903](https://cve.now/CVE-2024-48903.md): An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affect (CVSS 7.8)
- [CVE-2024-46903](https://cve.now/CVE-2024-46903.md): A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive informati (CVSS 6.5)
- [CVE-2024-46902](https://cve.now/CVE-2024-46902.md): A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive informati (CVSS 4.9)
- [CVE-2024-45335](https://cve.now/CVE-2024-45335.md): Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted viru (CVSS 8.4)
- [CVE-2024-45334](https://cve.now/CVE-2024-45334.md): Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthori (CVSS 7.8)
- [CVE-2024-41183](https://cve.now/CVE-2024-41183.md): Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevatio (CVSS 7.8)
- [CVE-2024-39753](https://cve.now/CVE-2024-39753.md): An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installat (CVSS 7.5)
- [CVE-2024-45504](https://cve.now/CVE-2024-45504.md): Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthentic (CVSS 6.5)
- [CVE-2024-37289](https://cve.now/CVE-2024-37289.md): An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio (CVSS 7.8)
- [CVE-2024-36473](https://cve.now/CVE-2024-36473.md): Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to lo (CVSS 5.3)
- [CVE-2024-36359](https://cve.now/CVE-2024-36359.md): A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to es (CVSS 5.4)
- [CVE-2024-36358](https://cve.now/CVE-2024-36358.md): A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate pri (CVSS 7.8)
- [CVE-2024-36307](https://cve.now/CVE-2024-36307.md): A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sen (CVSS 4.7)
- [CVE-2024-36306](https://cve.now/CVE-2024-36306.md): A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to c (CVSS 6.1)
- [CVE-2024-36305](https://cve.now/CVE-2024-36305.md): A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected instal (CVSS 7.8)
- [CVE-2024-36304](https://cve.now/CVE-2024-36304.md): A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escala (CVSS 7.8)
- [CVE-2024-36303](https://cve.now/CVE-2024-36303.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2024-36302](https://cve.now/CVE-2024-36302.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2024-32849](https://cve.now/CVE-2024-32849.md): Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentiona (CVSS 7.8)
- [CVE-2024-23940](https://cve.now/CVE-2024-23940.md): Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to (CVSS 7.8)
- [CVE-2023-52338](https://cve.now/CVE-2023-52338.md): A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could (CVSS 7.8)
- [CVE-2023-52337](https://cve.now/CVE-2023-52337.md): An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent (CVSS 7.8)
- [CVE-2023-52331](https://cve.now/CVE-2023-52331.md): A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with i (CVSS 7.1)
- [CVE-2023-52330](https://cve.now/CVE-2023-52330.md): A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected install (CVSS 6.1)
- [CVE-2023-52329](https://cve.now/CVE-2023-52329.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (CVSS 6.1)
- [CVE-2023-52328](https://cve.now/CVE-2023-52328.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (CVSS 6.1)
- [CVE-2023-52327](https://cve.now/CVE-2023-52327.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (CVSS 6.1)
- [CVE-2023-52326](https://cve.now/CVE-2023-52326.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (CVSS 6.1)
- [CVE-2023-52325](https://cve.now/CVE-2023-52325.md): A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on (CVSS 7.5)
- [CVE-2023-52324](https://cve.now/CVE-2023-52324.md): An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected in (CVSS 8.8)
- [CVE-2023-52094](https://cve.now/CVE-2023-52094.md): An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arb (CVSS 7.8)
- [CVE-2023-52093](https://cve.now/CVE-2023-52093.md): An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affecte (CVSS 7.4)
- [CVE-2023-52092](https://cve.now/CVE-2023-52092.md): A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected instal (CVSS 7.8)
- [CVE-2023-52091](https://cve.now/CVE-2023-52091.md): An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected (CVSS 7.8)
- [CVE-2023-52090](https://cve.now/CVE-2023-52090.md): A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected instal (CVSS 7.8)
- [CVE-2023-47202](https://cve.now/CVE-2023-47202.md): A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on af (CVSS 7.8)
- [CVE-2023-47201](https://cve.now/CVE-2023-47201.md): A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privil (CVSS 6.7)
- [CVE-2023-47200](https://cve.now/CVE-2023-47200.md): A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privil (CVSS 7.8)
- [CVE-2023-47199](https://cve.now/CVE-2023-47199.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2023-47198](https://cve.now/CVE-2023-47198.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2023-47197](https://cve.now/CVE-2023-47197.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2023-47196](https://cve.now/CVE-2023-47196.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2023-47195](https://cve.now/CVE-2023-47195.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2023-47194](https://cve.now/CVE-2023-47194.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2023-47193](https://cve.now/CVE-2023-47193.md): An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte (CVSS 7.8)
- [CVE-2023-47192](https://cve.now/CVE-2023-47192.md): An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected insta (CVSS 7.8)
- [CVE-2023-41178](https://cve.now/CVE-2023-41178.md): Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authentic (CVSS 6.1)
- [CVE-2023-41177](https://cve.now/CVE-2023-41177.md): Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authentic (CVSS 6.1)
- [CVE-2023-41176](https://cve.now/CVE-2023-41176.md): Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authentic (CVSS 6.1)
- [CVE-2023-38627](https://cve.now/CVE-2023-38627.md): A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow a (CVSS 5.4)
- [CVE-2023-38626](https://cve.now/CVE-2023-38626.md): A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow a (CVSS 5.4)
- [CVE-2023-38625](https://cve.now/CVE-2023-38625.md): A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow a (CVSS 5.4)
- [CVE-2023-38624](https://cve.now/CVE-2023-38624.md): A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow a (CVSS 5.4)
- [CVE-2023-41179](https://cve.now/CVE-2023-41179.md): A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security an (CVSS 7.2, KEV)
- [CVE-2023-35695](https://cve.now/CVE-2023-35695.md): A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which (no CVSS)
- [CVE-2023-34148](https://cve.now/CVE-2023-34148.md): An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacke (no CVSS)
- [CVE-2023-34147](https://cve.now/CVE-2023-34147.md): An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacke (no CVSS)
- [CVE-2023-34146](https://cve.now/CVE-2023-34146.md): An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacke (no CVSS)
- [CVE-2023-34145](https://cve.now/CVE-2023-34145.md): An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to (no CVSS)
- [CVE-2023-34144](https://cve.now/CVE-2023-34144.md): An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to (no CVSS)
- [CVE-2023-32605](https://cve.now/CVE-2023-32605.md): Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attac (no CVSS)
- [CVE-2023-32604](https://cve.now/CVE-2023-32604.md): Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attac (no CVSS)
- [CVE-2023-32557](https://cve.now/CVE-2023-32557.md): A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an ar (no CVSS)
- [CVE-2023-32556](https://cve.now/CVE-2023-32556.md): A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitiv (no CVSS)
- [CVE-2023-32555](https://cve.now/CVE-2023-32555.md): A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escala (no CVSS)
- [CVE-2023-32554](https://cve.now/CVE-2023-32554.md): A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escala (no CVSS)
- [CVE-2023-32553](https://cve.now/CVE-2023-32553.md): An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain (no CVSS)
- [CVE-2023-32552](https://cve.now/CVE-2023-32552.md): An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain (no CVSS)
- [CVE-2023-32537](https://cve.now/CVE-2023-32537.md): Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attac (no CVSS)
- [CVE-2023-32536](https://cve.now/CVE-2023-32536.md): Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attac (no CVSS)
- [CVE-2023-32535](https://cve.now/CVE-2023-32535.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (no CVSS)
- [CVE-2023-32534](https://cve.now/CVE-2023-32534.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (no CVSS)
- [CVE-2023-32533](https://cve.now/CVE-2023-32533.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (no CVSS)
- [CVE-2023-32532](https://cve.now/CVE-2023-32532.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (no CVSS)
- [CVE-2023-32531](https://cve.now/CVE-2023-32531.md): Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an at (no CVSS)
- [CVE-2023-32530](https://cve.now/CVE-2023-32530.md): Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL i (no CVSS)
- [CVE-2023-32529](https://cve.now/CVE-2023-32529.md): Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL i (no CVSS)
- [CVE-2023-32528](https://cve.now/CVE-2023-32528.md): Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code (no CVSS)
- [CVE-2023-32527](https://cve.now/CVE-2023-32527.md): Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code (no CVSS)
- [CVE-2023-32526](https://cve.now/CVE-2023-32526.md): Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary file (no CVSS)
- [CVE-2023-32525](https://cve.now/CVE-2023-32525.md): Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary file (no CVSS)
- [CVE-2023-32524](https://cve.now/CVE-2023-32524.md): Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authenti (no CVSS)
- [CVE-2023-32523](https://cve.now/CVE-2023-32523.md): Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authenti (no CVSS)
- [CVE-2023-32522](https://cve.now/CVE-2023-32522.md): A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote atta (no CVSS)
- [CVE-2023-32521](https://cve.now/CVE-2023-32521.md): A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated r (no CVSS)
- [CVE-2023-30902](https://cve.now/CVE-2023-30902.md): A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintention (no CVSS)
- [CVE-2023-28929](https://cve.now/CVE-2023-28929.md): Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a (no CVSS)
- [CVE-2023-25069](https://cve.now/CVE-2023-25069.md): TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a mali (CVSS 8.8)
- [CVE-2023-28005](https://cve.now/CVE-2023-28005.md): A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical a (CVSS 6.8)
- [CVE-2023-25148](https://cve.now/CVE-2023-25148.md): A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing (CVSS 7.8)
- [CVE-2023-25147](https://cve.now/CVE-2023-25147.md): An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypa (CVSS 6.7)
- [CVE-2023-25146](https://cve.now/CVE-2023-25146.md): A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete th (CVSS 7.8)
- [CVE-2023-25145](https://cve.now/CVE-2023-25145.md): A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on (CVSS 7.8)
- [CVE-2023-25144](https://cve.now/CVE-2023-25144.md): An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and crea (CVSS 7.8)
- [CVE-2023-25143](https://cve.now/CVE-2023-25143.md): An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote c (CVSS 9.8)
- [CVE-2022-48191](https://cve.now/CVE-2022-48191.md): A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a (CVSS 7.0)
- [CVE-2022-45798](https://cve.now/CVE-2022-45798.md): A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could al (CVSS 7.8)
- [CVE-2022-45797](https://cve.now/CVE-2022-45797.md): An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Servic (CVSS 7.1)
- [CVE-2022-44654](https://cve.now/CVE-2022-44654.md): Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH m (CVSS 7.5)
- [CVE-2022-44653](https://cve.now/CVE-2022-44653.md): A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalat (CVSS 7.8)
- [CVE-2022-44652](https://cve.now/CVE-2022-44652.md): An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker (CVSS 7.8)
- [CVE-2022-44651](https://cve.now/CVE-2022-44651.md): A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escala (CVSS 7.0)
- [CVE-2022-44650](https://cve.now/CVE-2022-44650.md): A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allo (CVSS 7.8)
- [CVE-2022-44649](https://cve.now/CVE-2022-44649.md): An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could (CVSS 7.8)
- [CVE-2022-44648](https://cve.now/CVE-2022-44648.md): An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive inf (CVSS 5.5)
- [CVE-2022-44647](https://cve.now/CVE-2022-44647.md): An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive inf (CVSS 5.5)
- [CVE-2022-41749](https://cve.now/CVE-2022-41749.md): An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected inst (no CVSS)
- [CVE-2022-41748](https://cve.now/CVE-2022-41748.md): A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with adminis (no CVSS)
- [CVE-2022-41747](https://cve.now/CVE-2022-41747.md): An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with syste (no CVSS)
- [CVE-2022-41746](https://cve.now/CVE-2022-41746.md): A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installation (no CVSS)
- [CVE-2022-41745](https://cve.now/CVE-2022-41745.md): An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause me (no CVSS)
- [CVE-2022-41744](https://cve.now/CVE-2022-41744.md): A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local atta (no CVSS)
- [CVE-2022-40710](https://cve.now/CVE-2022-40710.md): A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attac (no CVSS)
- [CVE-2022-40709](https://cve.now/CVE-2022-40709.md): An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local (no CVSS)
- [CVE-2022-40708](https://cve.now/CVE-2022-40708.md): An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local (CVSS 3.3)
- [CVE-2022-40707](https://cve.now/CVE-2022-40707.md): An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local (no CVSS)
- [CVE-2022-40980](https://cve.now/CVE-2022-40980.md): A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with acc (no CVSS)
- [CVE-2022-40143](https://cve.now/CVE-2022-40143.md): A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow (no CVSS)
- [CVE-2022-40142](https://cve.now/CVE-2022-40142.md): A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents coul (no CVSS)
- [CVE-2022-40141](https://cve.now/CVE-2022-40141.md): A vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to intercept and decode certain communication stri (no CVSS)
- [CVE-2022-40140](https://cve.now/CVE-2022-40140.md): An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of (no CVSS)
- [CVE-2022-40139](https://cve.now/CVE-2022-40139.md): Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients (CVSS 7.2, KEV)
- [CVE-2022-38764](https://cve.now/CVE-2022-38764.md): A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly (no CVSS)
- [CVE-2022-37348](https://cve.now/CVE-2022-37348.md): Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow a (no CVSS)
- [CVE-2022-37347](https://cve.now/CVE-2022-37347.md): Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow a (CVSS 5.5)
- [CVE-2022-34893](https://cve.now/CVE-2022-34893.md): Trend Micro Security 2022 (consumer) has a link following vulnerability where an attacker with lower privileges could manipulate a mountpoin (no CVSS)
- [CVE-2022-40144](https://cve.now/CVE-2022-40144.md): A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product's login authenti (no CVSS)
- [CVE-2022-36336](https://cve.now/CVE-2022-36336.md): A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/trend-micro
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.