Trend Micro vulnerabilities
496 CVEs and advisories name Trend Micro as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-49216An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as
- CVE-2025-49215A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges o
- CVE-2025-49214An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code ex
- CVE-2025-49213An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe
- CVE-2025-49212An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe
- CVE-2025-49211A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected
- CVE-2025-30642A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) sit
- CVE-2025-30641A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to
- CVE-2025-30640A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected inst
- CVE-2025-30680A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain paramete
- CVE-2025-30679A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to man
- CVE-2025-30678A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to man
- CVE-2025-49487An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attac
- CVE-2025-49158An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges o
- CVE-2025-49157A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on af
- CVE-2025-49156A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected ins
- CVE-2025-49155An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject maliciou
- CVE-2025-49154An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker t
- CVE-2025-49220An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code exec
- CVE-2025-49219An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code exe
- CVE-2025-47867A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbi
- CVE-2025-47866An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbi
- CVE-2025-47865A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code
- CVE-2025-31286An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code.
- CVE-2025-31285A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator
- CVE-2025-31284A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to
- CVE-2025-31283A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator
- CVE-2025-31282A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrat
- CVE-2024-58105A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s
- CVE-2024-58104A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s