TM
Vendor
Trend Micro, Inc.
73
CVEs
2
On KEV
0
New 30D
Products
TM7.2
Trend Micro Worry-Free Business Security
Trend Micro, Inc.
1 CVEs1 on KEV0 new
TM7.2
Trend Micro Worry-Free Business Security Services
Trend Micro, Inc.
1 CVEs1 on KEV0 new
TM8.8
Trend Micro Apex One as a Service
Trend Micro, Inc.
27 CVEs0 on KEV0 new
TM8.8
Trend Micro Apex Central
Trend Micro, Inc.
12 CVEs0 on KEV0 new
TV9.0
Trend Vision One
Trend Micro, Inc.
5 CVEs0 on KEV0 new
TM7.8
Trend Micro Deep Security Agent
Trend Micro, Inc.
4 CVEs0 on KEV0 new
TA7.8
TrendAI Apex One (Mac)
Trend Micro, Inc.
4 CVEs0 on KEV0 new
TM6.1
Trend Micro Mobile Security for Enterprise
Trend Micro, Inc.
3 CVEs0 on KEV0 new
AO7.8
Antivirus One
Trend Micro Inc
2 CVEs0 on KEV0 new
TM7.8
Trend Micro Antivirus One
Trend Micro, Inc.
2 CVEs0 on KEV0 new
TM9.1
Trend Micro Deep Discovery Inspector
Trend Micro, Inc.
2 CVEs0 on KEV0 new
DS7.8
Deep Security Agent
Trend Micro Inc
1 CVEs0 on KEV0 new
TM9.8
Trend Micro Cloud Edge
Trend Micro, Inc.
1 CVEs0 on KEV0 new
TM7.8
Trend Micro HouseCall for Home Networks
Trend Micro, Inc.
1 CVEs0 on KEV0 new
TM5.4
Trend Micro InterScan Web Security Virtual Appliance
Trend Micro, Inc.
1 CVEs0 on KEV0 new
TM7.8
Trend Micro Maximum Security (Consumer)
Trend Micro, Inc.
1 CVEs0 on KEV0 new
TM7.8
Trend Micro Security (Consumer) uiAirSupport
Trend Micro, Inc.
1 CVEs0 on KEV0 new
TM7.8
Trend Micro VPN (consumer)
Trend Micro, Inc.
1 CVEs0 on KEV0 new
TM5.3
Trend Micro VPN Proxy One Pro
Trend Micro, Inc.
1 CVEs0 on KEV0 new
VC7.8
Vpn Consumer
Trend Micro Inc
1 CVEs0 on KEV0 new
WB7.8
Worry-Free Business Security
Trend Micro, Inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-71217 | TA TrendAI Apex One (Mac) Trend Micro, Inc. | 7.8 | May 21 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected… |
| CVE-2025-71216 | TA TrendAI Apex One (Mac) Trend Micro, Inc. | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-71215 | TA TrendAI Apex One (Mac) Trend Micro, Inc. | 7.0 | May 21 | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on… |
| CVE-2025-71214 | TA TrendAI Apex One (Mac) Trend Micro, Inc. | 7.8 | May 21 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-49154 | WB Worry-Free Business Security Trend Micro, Inc. | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… |
| CVE-2025-31286 | TV Trend Vision One Trend Micro, Inc. | 9.0 | Apr 2 | An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code |
| CVE-2025-31285 | TV Trend Vision One Trend Micro, Inc. | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create users who could then change… |
| CVE-2025-31284 | TV Trend Vision One Trend Micro, Inc. | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create users who could then change the… |
| CVE-2025-31283 | TV Trend Vision One Trend Micro, Inc. | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to create users who could then change… |
| CVE-2025-31282 | TV Trend Vision One Trend Micro, Inc. | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to create users who could then… |
| CVE-2024-58105 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Mar 25 | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on… |
| CVE-2024-58104 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Mar 25 | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on… |
| CVE-2022-28339 | TM Trend Micro HouseCall for Home Networks Trend Micro, Inc. | 7.8 | Feb 22 | Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user… |
| CVE-2024-52047 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 8.8 | Dec 31 | A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations |
| CVE-2024-48904 | TM Trend Micro Cloud Edge Trend Micro, Inc. | 9.8 | Oct 22 | An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances |
| CVE-2024-48903 | TM Trend Micro Deep Security Agent Trend Micro, Inc. | 7.8 | Oct 22 | An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-46903 | TM Trend Micro Deep Discovery Inspector Trend Micro, Inc. | 6.5 | Oct 22 | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations |
| CVE-2024-46902 | TM Trend Micro Deep Discovery Inspector Trend Micro, Inc. | 9.1 | Oct 22 | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations |
| CVE-2024-45335 | TM Trend Micro Antivirus One Trend Micro, Inc. | 5.5 | Oct 22 | Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a… |
| CVE-2024-45334 | TM Trend Micro Antivirus One Trend Micro, Inc. | 7.8 | Oct 22 | Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations… |
| CVE-2024-41183 | TM Trend Micro VPN (consumer) Trend Micro, Inc. | 7.8 | Oct 22 | Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges |
| CVE-2024-39753 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.5 | Oct 22 | An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations |
| CVE-2024-37289 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 10 | An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-36473 | TM Trend Micro VPN Proxy One Pro Trend Micro, Inc. | 5.3 | Jun 10 | Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial of Service (DoS) and under… |
| CVE-2024-36359 | TM Trend Micro InterScan Web Security Virtual Appliance Trend Micro, Inc. | 5.4 | Jun 10 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected… |
| CVE-2024-36358 | TM Trend Micro Deep Security Agent Trend Micro, Inc. | 7.8 | Jun 10 | A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-36307 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 5.5 | Jun 10 | A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on… |
| CVE-2024-36306 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 5.5 | Jun 10 | A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on… |
| CVE-2024-36305 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-36304 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.0 | Jun 10 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-36303 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-36302 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-32849 | TM Trend Micro Maximum Security (Consumer) Trend Micro, Inc. | 7.8 | Jun 10 | Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files… |
| CVE-2024-23940 | TM Trend Micro Security (Consumer) uiAirSupport Trend Micro, Inc. | 7.8 | Jan 29 | Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying… |
| CVE-2023-52338 | TM Trend Micro Deep Security Agent Trend Micro, Inc. | 7.8 | Jan 23 | A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate… |
| CVE-2023-52337 | TM Trend Micro Deep Security Agent Trend Micro, Inc. | 7.8 | Jan 23 | An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to… |
| CVE-2023-52331 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.1 | Jan 23 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly |
| CVE-2023-52330 | TM Trend Micro Apex Central Trend Micro, Inc. | 6.1 | Jan 23 | A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central |
| CVE-2023-52329 | TM Trend Micro Apex Central Trend Micro, Inc. | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… |
| CVE-2023-52328 | TM Trend Micro Apex Central Trend Micro, Inc. | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… |
| CVE-2023-52327 | TM Trend Micro Apex Central Trend Micro, Inc. | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… |
| CVE-2023-52326 | TM Trend Micro Apex Central Trend Micro, Inc. | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… |
| CVE-2023-52325 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.5 | Jan 23 | A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations |
| CVE-2023-52324 | TM Trend Micro Apex Central Trend Micro, Inc. | 8.8 | Jan 23 | An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations |
| CVE-2023-52094 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local… |
| CVE-2023-52093 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-52092 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-52091 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-52090 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47202 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47201 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47200 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47199 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47198 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47197 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47196 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47195 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47194 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47193 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2023-47192 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jan 23 | An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations |