Worry-free Business Security (Trendmicro) - vulnerabilities (CVEs)

58 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2025-06-17. Vendor: Trendmicro.

CVEs of Worry-free Business Security

• CVE-2025-49154 - CVSS 8.7 (high), 2025-06-17: An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key…
• CVE-2023-41179 - CVSS 7.2 (high), 2023-09-19: A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free…
• CVE-2022-36336 - CVSS 7.8 (high), 2022-07-30: A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to…
• CVE-2022-24679 - CVSS 7.8 (high), 2022-02-24: A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business…
• CVE-2022-24678 - CVSS 7.5 (high), 2022-02-24: An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free…
• CVE-2022-24680 - CVSS 7.8 (high), 2022-02-24: A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business…
• CVE-2022-23805 - CVSS 7.1 (high), 2022-02-04: A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send…
• CVE-2021-45442 - CVSS 7.1 (high), 2022-01-10: A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite…
• CVE-2021-45441 - CVSS 7.8 (high), 2022-01-10: A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file…
• CVE-2021-45440 - CVSS 7.8 (high), 2022-01-10: A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a…
• CVE-2021-45231 - CVSS 7.8 (high), 2022-01-10: A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and…
• CVE-2021-44024 - CVSS 7.1 (high), 2022-01-10: A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and…
• CVE-2021-44019 - CVSS 7.8 (high), 2021-12-03: An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected…
• CVE-2021-44021 - CVSS 7.8 (high), 2021-12-03: An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected…
• CVE-2021-44020 - CVSS 7.8 (high), 2021-12-03: An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected…
• CVE-2021-42012 - CVSS 7.8 (high), 2021-10-21: A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local…
• CVE-2021-42106 - CVSS 7.8 (high), 2021-10-21: Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security…
• CVE-2021-23139 - CVSS 7.5 (high), 2021-10-21: A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected…
• CVE-2021-42105 - CVSS 7.8 (high), 2021-10-21: Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security…
• CVE-2021-42108 - CVSS 7.8 (high), 2021-10-21: Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2021-42104 - CVSS 7.8 (high), 2021-10-21: Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security…
• CVE-2021-42107 - CVSS 7.8 (high), 2021-10-21: Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security…
• CVE-2021-3848 - CVSS 5.5 (medium), 2021-10-06: An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and…
• CVE-2021-36741 - CVSS 8.8 (high), 2021-07-29: An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a…
• CVE-2021-36742 - CVSS 7.8 (high), 2021-07-29: A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a…
• CVE-2021-32463 - CVSS 7.8 (high), 2021-07-20: An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS), Worry-Free Business Security 10.0…
• CVE-2021-25252 - CVSS 5.5 (medium), 2021-03-03: Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to…
• CVE-2021-25242 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2021-25245 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of settings…
• CVE-2021-25249 - CVSS 7.8 (high), 2021-02-04: An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security…
• CVE-2021-25241 - CVSS 5.3 (medium), 2021-02-04: A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an…
• CVE-2021-25244 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of…
• CVE-2021-25248 - CVSS 5.5 (medium), 2021-02-04: An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security…
• CVE-2021-25243 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2021-25246 - CVSS 6.5 (medium), 2021-02-04: An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business…
• CVE-2021-25239 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an…
• CVE-2021-25233 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2021-25238 - CVSS 5.3 (medium), 2021-02-04: An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an…
• CVE-2021-25231 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2021-25236 - CVSS 5.3 (medium), 2021-02-04: A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could…
• CVE-2021-25240 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2021-25228 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2021-25234 - CVSS 5.3 (medium), 2021-02-04: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow…
• CVE-2020-28574 - CVSS 7.5 (high), 2020-11-18: A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an…
• CVE-2020-24559 - CVSS 7.8 (high), 2020-09-01: A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to…
• CVE-2020-24557 - CVSS 7.8 (high), 2020-09-01: A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular…
• CVE-2020-24556 - CVSS 7.8 (high), 2020-09-01: A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows…
• CVE-2020-24558 - CVSS 7.1 (high), 2020-09-01: A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to…
• CVE-2020-8598 - CVSS 9.8 (critical), 2020-03-18: Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a…
• CVE-2020-8470 - CVSS 7.5 (high), 2020-03-18: Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an…
• CVE-2020-8468 - CVSS 8.8 (high), 2020-03-18: Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability…
• CVE-2020-8600 - CVSS 9.8 (critical), 2020-03-18: Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key…
• CVE-2019-18189 - CVSS 9.8 (critical), 2019-10-28: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to…
• CVE-2019-9489 - CVSS 7.5 (high), 2019-04-05: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0)…
• CVE-2018-6218 - CVSS 7 (high), 2018-02-16: A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.
• CVE-2016-1224 - CVSS 6.1 (medium), 2016-06-19: CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject…
• CVE-2016-1223 - CVSS 5.3 (medium), 2016-06-19: Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows…
• CVE-2008-2433 - CVSS 9.8 (critical), 2008-08-27: The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates…