Trend Micro vulnerabilities
496 CVEs and advisories name Trend Micro as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-28339Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could al
- CVE-2024-55955An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 cou
- CVE-2024-55917An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio
- CVE-2024-55632A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected instal
- CVE-2024-55631An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations
- CVE-2024-53647Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email ve
- CVE-2024-52050A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected in
- CVE-2024-52049A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio
- CVE-2024-52048A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio
- CVE-2024-52047A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected inst
- CVE-2024-51503A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate p
- CVE-2024-48904An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.
- CVE-2024-48903An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affect
- CVE-2024-46903A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive informati
- CVE-2024-46902A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive informati
- CVE-2024-45335Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted viru
- CVE-2024-45334Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthori
- CVE-2024-41183Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevatio
- CVE-2024-39753An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installat
- CVE-2024-45504Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthentic
- CVE-2024-37289An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio
- CVE-2024-36473Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to lo
- CVE-2024-36359A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to es
- CVE-2024-36358A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate pri
- CVE-2024-36307A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sen
- CVE-2024-36306A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to c
- CVE-2024-36305A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected instal
- CVE-2024-36304A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escala
- CVE-2024-36303An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte
- CVE-2024-36302An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte