TR
Vendor
Trendmicro
756
CVEs
17
On KEV
0
New 30D
Products
OF9.8
Officescan
Trendmicro
71 CVEs6 on KEV0 new
WB9.8
Worry-free Business Security
Trendmicro
58 CVEs5 on KEV0 new
OB8.8
Officescan Business Security
Trendmicro
3 CVEs2 on KEV0 new
TM9.8
Trend Micro Apex Central
Trend Micro, Inc.
35 CVEs1 on KEV0 new
WB9.8
Worry-free Business Security Services
Trendmicro
25 CVEs1 on KEV0 new
TA9.8
TrendAI Apex One as a Service
Trend Micro, Inc.
23 CVEs1 on KEV0 new
TA9.8
TrendAI Apex One
Trend Micro, Inc.
12 CVEs1 on KEV0 new
IW9.9
Interscan Web Security Virtual Appliance
Trendmicro
29 CVEs0 on KEV0 new
CM10.0
Control Manager
Trendmicro
22 CVEs0 on KEV0 new
MS9.8
Mobile Security
Trendmicro
21 CVEs0 on KEV0 new
EE9.8
Email Encryption Gateway
Trendmicro
19 CVEs0 on KEV0 new
AN7.8
Antivirus+
Trendmicro
18 CVEs0 on KEV0 new
SE9.8
Serverprotect
Trendmicro
18 CVEs0 on KEV0 new
IS9.8
Internet Security
Trendmicro
17 CVEs0 on KEV0 new
TM8.8
Trend Micro Deep Security
Trend Micro, Inc.
15 CVEs0 on KEV0 new
TM9.8
Trend Micro Password Manager
Trend Micro, Inc.
15 CVEs0 on KEV0 new
MS9.8
Maximum Security
Trendmicro
14 CVEs0 on KEV0 new
IM8.8
Interscan Messaging Security Virtual Appliance
Trendmicro
13 CVEs0 on KEV0 new
PS9.8
Premium Security
Trendmicro
13 CVEs0 on KEV0 new
SP9.8
Smart Protection Server
Trendmicro
13 CVEs0 on KEV0 new
MS9.8
Maximum Security 2020
Trendmicro
12 CVEs0 on KEV0 new
TD9.8
Threat Discovery Appliance
Trendmicro
12 CVEs0 on KEV0 new
IS9.8
Internet Security 2020
Trendmicro
11 CVEs0 on KEV0 new
PS9.8
Premium Security 2020
Trendmicro
11 CVEs0 on KEV0 new
HO7.8
Housecall
Trendmicro
9 CVEs0 on KEV0 new
TM9.8
Trend Micro Endpoint Encryption
Trendmicro
9 CVEs0 on KEV0 new
AS9.8
Antivirus + Security 2020
Trendmicro
8 CVEs0 on KEV0 new
TM9.8
Trend Micro Endpoint Encryption Policy Server
Trend Micro, Inc.
8 CVEs0 on KEV0 new
MS7.8
Maximum Security 2019
Trendmicro
8 CVEs0 on KEV0 new
SE7.8
Security
Trendmicro
8 CVEs0 on KEV0 new
TM–
Trend Micro Antivirus
Trendmicro
8 CVEs0 on KEV0 new
AS9.8
Antivirus + Security
Trendmicro
7 CVEs0 on KEV0 new
DS7.8
Deep Security
Trendmicro
7 CVEs0 on KEV0 new
HF7.8
Housecall For Home Networks
Trendmicro
7 CVEs0 on KEV0 new
IS7.8
Internet Security 2019
Trendmicro
7 CVEs0 on KEV0 new
TM7.8
Trend Micro Internet Security (Consumer)
Trend Micro, Inc.
7 CVEs0 on KEV0 new
PS7.8
Premium Security 2019
Trendmicro
7 CVEs0 on KEV0 new
DD9.1
Deep Discovery Inspector
Trendmicro
6 CVEs0 on KEV0 new
SC9.1
Scanmail
Trendmicro
6 CVEs0 on KEV0 new
AF7.8
Antivirus For Mac 2017
Trendmicro
5 CVEs0 on KEV0 new
AF7.8
Antivirus For Mac 2018
Trendmicro
5 CVEs0 on KEV0 new
AF7.8
Antivirus For Mac 2019
Trendmicro
5 CVEs0 on KEV0 new
AS7.8
Antivirus + Security 2019
Trendmicro
5 CVEs0 on KEV0 new
HN7.8
Home Network Security
Trendmicro
5 CVEs0 on KEV0 new
MS7.8
Maximum Security 2021
Trendmicro
5 CVEs0 on KEV0 new
TV9.0
Trend Vision One
Trendmicro
5 CVEs0 on KEV0 new
VP8.1
Vulnerability Protection
Trendmicro
5 CVEs0 on KEV0 new
DS8.1
Deep Security Manager
Trendmicro
4 CVEs0 on KEV0 new
OC7.5
Officescan Cloud
Trendmicro
4 CVEs0 on KEV0 new
SF9.8
Serverprotect For Storage
Trendmicro
4 CVEs0 on KEV0 new
A27.8
Antivirus+ 2020
Trendmicro
3 CVEs0 on KEV0 new
AS7.8
Antivirus+ Security 2021
Trendmicro
3 CVEs0 on KEV0 new
TM9.8
Trend Micro Apex Central
Trend Micro, Inc.
3 CVEs0 on KEV0 new
DD9.8
Deep Discovery Director
Trendmicro
3 CVEs0 on KEV0 new
ES7.8
Endpoint Sensor
Trendmicro
3 CVEs0 on KEV0 new
IS7.8
Internet Security 2021
Trendmicro
3 CVEs0 on KEV0 new
IM–
Interscan Messaging Security Suite
Trendmicro
3 CVEs0 on KEV0 new
TM7.8
Trend Micro Security (Consumer)
Trend Micro, Inc.
3 CVEs0 on KEV0 new
PS7.8
Premium Security 2021
Trendmicro
3 CVEs0 on KEV0 new
SF9.8
Serverprotect For Network Appliance Filer
Trendmicro
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45208 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-45207 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-45206 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34930 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34929 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34928 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34927 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34926 In wildKEV | TA TrendAI Apex One Trend Micro, Inc. | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability |
| CVE-2025-71213 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-71212 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-71211 | TA TrendAI Apex One Trend Micro, Inc. | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations |
| CVE-2025-71210 | TA TrendAI Apex One Trend Micro, Inc. | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations |
| CVE-2025-69260 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.5 | Jan 8 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations |
| CVE-2025-69259 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.5 | Jan 8 | A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations |
| CVE-2025-69258 | TM Trend Micro Apex Central Trend Micro, Inc. | 9.8 | Jan 8 | A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to… |
| CVE-2025-53503 | TM Trend Micro Cleaner One Pro Trend Micro, Inc. | 7.8 | Jul 10 | Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files… |
| CVE-2025-53378 | TM Trend Micro Worry-Free Business Security Services Trend Micro, Inc. | 9.8 | Jul 10 | A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control… |
| CVE-2025-52837 | TM Trend Micro Password Manager Trend Micro, Inc. | 7.8 | Jul 10 | Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the… |
| CVE-2025-52521 | TM Trend Micro Security (Consumer) Trend Micro, Inc. | 7.1 | Jul 10 | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete… |
| CVE-2025-49385 | TM Trend Micro Internet Security (Consumer) Trend Micro, Inc. | 7.1 | Jun 17 | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete… |
| CVE-2025-49384 | TM Trend Micro Internet Security (Consumer) Trend Micro, Inc. | 7.1 | Jun 17 | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete… |
| CVE-2025-48443 | TM Trend Micro Password Manager Trend Micro, Inc. | 6.6 | Jun 17 | Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker… |
| CVE-2025-49218 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 7.8 | Jun 17 | A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations |
| CVE-2025-49217 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 9.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49216 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 9.8 | Jun 17 | An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product… |
| CVE-2025-49215 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 8.8 | Jun 17 | A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations |
| CVE-2025-49214 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 8.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations |
| CVE-2025-49213 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 9.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49212 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 9.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49211 | TM Trend Micro Endpoint Encryption Policy Server Trend Micro, Inc. | 7.8 | Jun 17 | A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations |
| CVE-2025-30642 | TM Trend Micro Deep Security Trend Micro, Inc. | 5.5 | Jun 17 | A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations |
| CVE-2025-30641 | TM Trend Micro Deep Security Trend Micro, Inc. | 7.8 | Jun 17 | A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected… |
| CVE-2025-30640 | TM Trend Micro Deep Security Trend Micro, Inc. | 7.8 | Jun 17 | A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-30680 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.1 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on… |
| CVE-2025-30679 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to… |
| CVE-2025-30678 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to… |
| CVE-2025-49487 | TM Trend Micro Worry-Free Business Security Services Trend Micro, Inc. | 6.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine… |
| CVE-2025-49158 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations |
| CVE-2025-49157 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations |
| CVE-2025-49156 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations |
| CVE-2025-49155 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 8.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code… |
| CVE-2025-49154 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… |
| CVE-2025-49220 | TM Trend Micro Apex Central Trend Micro, Inc. | 9.8 | Jun 17 | An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49219 | TM Trend Micro Apex Central Trend Micro, Inc. | 9.8 | Jun 17 | An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-47867 | TM Trend Micro Apex Central Trend Micro, Inc. | 9.8 | Jun 17 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and… |
| CVE-2025-47866 | TM Trend Micro Apex Central Trend Micro, Inc. | 7.5 | Jun 17 | An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations |
| CVE-2025-47865 | TM Trend Micro Apex Central Trend Micro, Inc. | 9.8 | Jun 17 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations |
| CVE-2025-31286 | TV Trend Vision One Trendmicro | 9.0 | Apr 2 | An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code |
| CVE-2025-31285 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create users who could then change… |
| CVE-2025-31284 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create users who could then change the… |
| CVE-2025-31283 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to create users who could then change… |
| CVE-2025-31282 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to create users who could then… |
| CVE-2022-28339 | HF Housecall For Home Networks Trendmicro | 7.8 | Feb 22 | Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user… |
| CVE-2024-55955 | TM Trend Micro Deep Security Trend Micro, Inc. | 7.3 | Dec 31 | An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate… |
| CVE-2024-55917 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-55632 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-55631 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-53647 | TM Trend Micro ID Security Trend Micro, Inc. | 8.2 | Dec 31 | Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email verification requests without any… |
| CVE-2024-52050 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-52049 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |