Trend Micro Inc. - vulnerabilities (CVEs)

123 CVEs in 25 products, 0 in the last 30 days, newest from 2026-05-21.

Products

• Trend Micro Apex One - 56 CVEs
• Trend Micro Apex One As A Service - 27 CVEs
• Trend Micro Apex Central - 23 CVEs
• Trend Micro Moibile Security For Enterprise - 9 CVEs
• Trend Vision One - 5 CVEs
• Trend Micro Deep Security Agent - 4 CVEs
• Trendai Apex One Mac - 4 CVEs
• Trend Micro Deep Discovery Director - 3 CVEs
• Trend Micro Mobile Security For Enterprise - 3 CVEs
• Trend Micro Antivirus One - 2 CVEs
• Trend Micro Deep Discovery Inspector - 2 CVEs
• Trend Micro Cloud Edge - 1 CVEs
• Trend Micro Endpoint Encryption Full Disk Encryption - 1 CVEs
• Trend Micro Housecall For Home Networks - 1 CVEs
• Trend Micro Interscan Web Security Virtual Appliance - 1 CVEs
• Trend Micro Maximum Security Consumer - 1 CVEs
• Trend Micro Maxium Security Consumer - 1 CVEs
• Trend Micro Security Consumer - 1 CVEs
• Trend Micro Security Consumer Uiairsupport - 1 CVEs
• Trend Micro Vpn Consumer - 1 CVEs
• Trend Micro Vpn Proxy One Pro - 1 CVEs
• Trend Micro Worry-free Business Security - 1 CVEs
• Trend Micro Worry-free Business Security Services - 1 CVEs
• Txone Networks Stellarone - 1 CVEs
• Worry-free Business Security - 1 CVEs

Newest CVEs of Trend Micro Inc.

• CVE-2025-71216 - CVSS 7.8 (high), 2026-05-21: A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on…
• CVE-2025-71215 - CVSS 7 (high), 2026-05-21: A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to…
• CVE-2025-71214 - CVSS 7.8 (high), 2026-05-21: An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected…
• CVE-2025-71217 - CVSS 7.8 (high), 2026-05-21: An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges…
• CVE-2025-49154 - CVSS 8.7 (high), 2025-06-17: An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key…
• CVE-2025-31286 - CVSS 9 (critical), 2025-04-02: An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code. Please note: this…
• CVE-2025-31285 - CVSS 7.2 (high), 2025-04-02: A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create users…
• CVE-2025-31284 - CVSS 7.2 (high), 2025-04-02: A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create users who…
• CVE-2025-31283 - CVSS 7.2 (high), 2025-04-02: A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to create users…
• CVE-2025-31282 - CVSS 7.2 (high), 2025-04-02: A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to create users…
• CVE-2024-58105 - CVSS 7.8 (high), 2025-03-25: A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute…
• CVE-2024-58104 - CVSS 7.8 (high), 2025-03-25: A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute…
• CVE-2022-28339 - CVSS 7.8 (high), 2025-02-22: Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker…
• CVE-2024-52047 - CVSS 8.8 (high), 2024-12-31: A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please…
• CVE-2024-48904 - CVSS 9.8 (critical), 2024-10-22: An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note:…
• CVE-2024-48903 - CVSS 7.8 (high), 2024-10-22: An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations.…
• CVE-2024-46903 - CVSS 6.5 (medium), 2024-10-22: A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected…
• CVE-2024-46902 - CVSS 9.1 (critical), 2024-10-22: A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected…
• CVE-2024-41183 - CVSS 7.8 (high), 2024-10-22: Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges.
• CVE-2024-45335 - CVSS 8.4 (high), 2024-10-22: Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself…
• CVE-2024-45334 - CVSS 7.8 (high), 2024-10-22: Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to…
• CVE-2024-39753 - CVSS 7.5 (high), 2024-10-22: An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note:…
• CVE-2024-37289 - CVSS 7.8 (high), 2024-06-10: An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note:…
• CVE-2024-36307 - CVSS 5.5 (medium), 2024-06-10: A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information…
• CVE-2024-36359 - CVSS 5.4 (medium), 2024-06-10: A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges…
• CVE-2024-36358 - CVSS 7.8 (high), 2024-06-10: A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on…
• CVE-2024-36473 - CVSS 5.3 (medium), 2024-06-10: Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial of…
• CVE-2024-36303 - CVSS 7.8 (high), 2024-06-10: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.…
• CVE-2024-36306 - CVSS 6.1 (medium), 2024-06-10: A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a…
• CVE-2024-36302 - CVSS 7.8 (high), 2024-06-10: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.…