Trend Micro
Page 2 of 4 — Trend Micro CVEs from a corpus of 315, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25245 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of settings info… |
CVE-2021-25244 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of configuration… |
CVE-2021-25243 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25242 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25241 | Medium | 5.3 | 2021-02-04 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unau… |
CVE-2021-25240 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25239 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthe… |
CVE-2021-25238 | Medium | 5.3 | 2021-02-04 | An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unaut… |
CVE-2021-25237 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about the managing port us… |
CVE-2021-25236 | Medium | 5.3 | 2021-02-04 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allo… |
CVE-2021-25235 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25234 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25233 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25232 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25231 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25230 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25229 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25228 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25227 | Low | 3.3 | 2021-02-04 | Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality wi… |
CVE-2021-25247 | High | 7.8 | 2021-01-27 | A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate pri… |
CVE-2021-25226 | Medium | 5.5 | 2021-01-27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-se… |
CVE-2021-25225 | Medium | 5.5 | 2021-01-27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-se… |
CVE-2021-25224 | Medium | 5.5 | 2021-01-27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-se… |
CVE-2020-8466 | Critical | 9.8 | 2020-12-17 | A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could all… |
CVE-2020-8465 | Critical | 9.8 | 2020-12-17 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSR… |
CVE-2020-8464 | High | 7.5 | 2020-12-17 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost… |
CVE-2020-8463 | High | 7.5 | 2020-12-17 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous us… |
CVE-2020-8462 | Medium | 4.8 | 2020-12-17 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web inter… |
CVE-2020-8461 | High | 8.8 | 2020-12-17 | A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to sen… |
CVE-2020-27010 | Medium | 4.8 | 2020-12-17 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web inter… |
CVE-2020-28583 | Medium | 5.3 | 2020-12-01 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to… |
CVE-2020-28582 | Medium | 5.3 | 2020-12-01 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to… |
CVE-2020-28577 | Medium | 5.3 | 2020-12-01 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to… |
CVE-2020-28576 | Medium | 5.3 | 2020-12-01 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to… |
CVE-2020-28575 | Medium | 6.7 | 2020-12-01 | A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affe… |
CVE-2020-28573 | Medium | 5.3 | 2020-12-01 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to… |
CVE-2020-28581 | High | 7.2 | 2020-11-18 | A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attack… |
CVE-2020-28580 | High | 7.2 | 2020-11-18 | A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker… |
CVE-2020-28579 | High | 8.8 | 2020-11-18 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP… |
CVE-2020-28578 | Critical | 9.8 | 2020-11-18 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTT… |
CVE-2020-28574 | High | 7.5 | 2020-11-18 | A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated… |
CVE-2020-28572 | High | 7.8 | 2020-11-18 | A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code i… |
CVE-2020-27697 | High | 7.8 | 2020-11-18 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected lo… |
CVE-2020-27696 | High | 7.8 | 2020-11-18 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory w… |
CVE-2020-27695 | High | 7.8 | 2020-11-18 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory… |
CVE-2020-27694 | High | 8.8 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may vulnerable to attack. |
CVE-2020-27693 | Medium | 4.4 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that is considered outdated. |
CVE-2020-27019 | Medium | 5.5 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker t… |
CVE-2020-27018 | Medium | 5.5 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vulnerability which could allow an authen… |
CVE-2020-27017 | Medium | 4.9 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow… |
CVE-2020-27016 | High | 8.8 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an… |
CVE-2020-27015 | Medium | 4.4 | 2020-10-30 | Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and… |
CVE-2020-27014 | Medium | 6.4 | 2020-10-30 | Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, coul… |
CVE-2020-27013 | Medium | 4.4 | 2020-10-14 | Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with sever… |
CVE-2020-25778 | Medium | 6.0 | 2020-10-14 | Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak sever… |
CVE-2020-25777 | Medium | 5.4 | 2020-10-14 | Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protect… |
CVE-2020-25779 | Low | 3.3 | 2020-10-13 | Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a… |
CVE-2020-25776 | High | 7.8 | 2020-10-02 | Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a critical file on t… |
CVE-2020-25775 | Medium | 6.3 | 2020-09-29 | The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could all… |
CVE-2020-25774 | Medium | 4.3 | 2020-09-29 | A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which… |
CVE-2020-25773 | High | 7.8 | 2020-09-29 | A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interact… |
CVE-2020-25772 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-25771 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-25770 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-24565 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-24564 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-24563 | High | 7.8 | 2020-09-29 | A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then co… |
CVE-2020-24562 | High | 7.8 | 2020-09-29 | A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could b… |
CVE-2020-24560 | High | 7.5 | 2020-09-24 | An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to c… |
CVE-2020-15604 | High | 7.5 | 2020-09-24 | An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to c… |
CVE-2020-24561 | Critical | 9.1 | 2020-09-15 | A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attack… |
CVE-2020-24559 | High | 7.8 | 2020-09-01 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to mani… |
CVE-2020-24558 | High | 7.1 | 2020-09-01 | A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipu… |
CVE-2020-24557 | High | 7.8 | 2020-09-01 | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product… |
CVE-2020-24556 | High | 7.8 | 2020-09-01 | A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows… |
CVE-2020-8602 | High | 7.2 | 2020-08-27 | A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated a… |
CVE-2020-15605 | High | 8.1 | 2020-08-27 | If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated a… |
CVE-2020-15601 | High | 8.1 | 2020-08-27 | If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unauthenticated attacker w… |
CVE-2020-8607 | Medium | 6.7 | 2020-08-05 | An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an… |
CVE-2020-15603 | High | 7.5 | 2020-07-15 | An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to mani… |
CVE-2020-15602 | High | 7.8 | 2020-07-15 | An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family of products could a… |
CVE-2020-8606 | Critical | 9.8 | 2020-05-27 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Tr… |
CVE-2020-8605 | High | 8.8 | 2020-05-27 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Aut… |
CVE-2020-8604 | High | 7.5 | 2020-05-27 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installati… |
CVE-2020-8603 | Medium | 6.1 | 2020-05-27 | A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web inter… |
CVE-2020-8600 | Critical | 9.8 | 2020-03-18 | Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key f… |
CVE-2020-8599 | Critical | 9.8 | 2020-03-18 | Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary p… |
CVE-2020-8598 | Critical | 9.8 | 2020-03-18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a r… |
CVE-2020-8470 | High | 7.5 | 2020-03-18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an… |
CVE-2020-8468 | High | 8.8 | 2020-03-18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability w… |
CVE-2020-8467 | High | 8.8 | 2020-03-18 | A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary co… |
CVE-2020-8469 | High | 7.8 | 2020-03-12 | Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalatio… |
CVE-2020-8601 | High | 7.8 | 2020-02-20 | Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located… |
CVE-2019-19694 | Medium | 4.7 | 2020-02-20 | The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (DoS) attack in which a malicious actor… |
CVE-2019-14688 | High | 7.0 | 2020-02-20 | Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnera… |
CVE-2019-20358 | High | 7.8 | 2020-01-30 | Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same dire… |
CVE-2019-20357 | High | 7.8 | 2020-01-18 | A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could poten… |
CVE-2019-19697 | Medium | 6.7 | 2020-01-18 | An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain eleva… |
CVE-2019-19696 | Medium | 5.5 | 2020-01-18 | A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by… |
CVE-2019-15625 | Medium | 5.5 | 2020-01-18 | A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory process… |