Trend Micro, Inc. Trend Micro Apex One
69 CVEs affecting Trend Micro, Inc. Trend Micro Apex One. Latest disclosed: 2025-08-05. Critical: 4, High: 55.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32557 | Critical | 9.8 | 2023-06-26 | A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the… |
CVE-2023-25143 | Critical | 9.8 | 2023-03-10 | An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state… |
CVE-2025-54987 | Critical | 9.4 | 2025-08-05 | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute co… |
CVE-2025-54948 | Critical | 9.4 | 2025-08-05 | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute co… |
CVE-2025-49155 | High | 8.8 | 2025-06-17 | An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to a… |
CVE-2025-49154 | High | 8.7 | 2025-06-17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key mem… |
CVE-2025-49157 | High | 7.8 | 2025-06-17 | A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installation… |
CVE-2024-55917 | High | 7.8 | 2024-12-31 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note… |
CVE-2024-55632 | High | 7.8 | 2024-12-31 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please… |
CVE-2024-55631 | High | 7.8 | 2024-12-31 | An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: a… |
CVE-2024-52050 | High | 7.8 | 2024-12-31 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Ple… |
CVE-2024-52049 | High | 7.8 | 2024-12-31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This vulnerabil… |
CVE-2024-52048 | High | 7.8 | 2024-12-31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This vulnerabil… |
CVE-2024-37289 | High | 7.8 | 2024-06-10 | An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note… |
CVE-2024-36305 | High | 7.8 | 2024-06-10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please… |
CVE-2024-36304 | High | 7.8 | 2024-06-10 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on af… |
CVE-2024-36303 | High | 7.8 | 2024-06-10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. … |
CVE-2024-36302 | High | 7.8 | 2024-06-10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. … |
CVE-2023-52094 | High | 7.8 | 2024-01-23 | An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, lead… |
CVE-2023-52093 | High | 7.8 | 2024-01-23 | An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. … |