CVE Program partner

trendmicro

Trend Micro, Inc.

API
CVEs, 365 days19506 all time, 0 rejected
Quality85%median 99%
CVSS by the CNA78%share of records
CWE78%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA21%lower is better
OrganisationTrend Micro, Inc.
RoleCNA
TypeVendor
Reports tomitre
ScopeTrend Micro <a href='https://success.trendmicro.com/solution/1105726-supported-products-trend-micro' target='_blank'>supported products</a>, including any end-of-life products.
Advisorieshttps://success.trendmicro.com/vulnerability-response#report

Latest CVEs · RSS

  • CVE-2026-45208 2026-05-21 · CVSS 7.8
    A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note:
  • CVE-2026-45207 2026-05-21 · CVSS 7.8
    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to C
  • CVE-2026-45206 2026-05-21 · CVSS 7.8
    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to C
  • CVE-2026-34930 2026-05-21 · CVSS 7.8
    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to C
  • CVE-2026-34929 2026-05-21 · CVSS 7.8
    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to C
  • CVE-2026-34928 2026-05-21 · CVSS 7.8
    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to C
  • CVE-2026-34927 2026-05-21 · CVSS 7.8
    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an att
  • CVE-2026-34926 2026-05-21 · CVSS 6.7
    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to in
  • CVE-2025-71217 2026-05-21
    An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges o
  • CVE-2025-71216 2026-05-21
    A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affecte
  • CVE-2025-71215 2026-05-21
    A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate
  • CVE-2025-71214 2026-05-21
    An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected i
  • CVE-2025-71213 2026-05-21 · CVSS 7.8
    An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note:
  • CVE-2025-71212 2026-05-21 · CVSS 7.8
    A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please
  • CVE-2025-71211 2026-05-21 · CVSS 9.8
    A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installat
  • CVE-2025-71210 2026-05-21 · CVSS 9.8
    A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installat
  • CVE-2025-69260 2026-01-08 · CVSS 7.5
    A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected install
  • CVE-2025-69259 2026-01-08 · CVSS 7.5
    A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affecte
  • CVE-2025-69258 2026-01-08 · CVSS 9.8
    A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executabl
  • CVE-2025-54987 2025-08-05 · CVSS 9.4
    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute com
  • CVE-2025-54948 2025-08-05 · CVSS 9.4
    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute com
  • CVE-2025-53503 2025-07-10 · CVSS 7.8
    Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend M
  • CVE-2025-53378 2025-07-10 · CVSS 7.6
    A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remo
  • CVE-2025-52837 2025-07-10 · CVSS 7.8
    Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an at
  • CVE-2025-52521 2025-07-10 · CVSS 7.8
    Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintention

All CVE Program partners