Priority CRITICAL 91KEV
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate th…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04216 · Published 2023-09-19 · Fixed in 14.0.0.12380, 14.0.12637 +2 CWE-94
Priority MEDIUM 43
A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0078 · Published 2025-07-10 · Fixed in 6.7.3954 / 14.3.1299 CWE-306
Priority LOW 37
An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Secu…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02335 · Published 2022-02-24 · No fix listed CWE-400
Priority LOW 36
An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…
CVSS 3.1HIGH 8.7· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2025-06-17 · Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284
Priority LOW 35
A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00571 · Published 2022-07-29 · No fix listed CWE-59
Priority LOW 35
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00477 · Published 2022-02-24 · No fix listed CWE-59
Priority LOW 35
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00477 · Published 2022-02-24 · No fix listed CWE-59
Priority LOW 35
A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2022-01-08 · No fix listed CWE-269
Priority LOW 35
A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially craft…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00664 · Published 2022-01-08 · No fix listed CWE-59
Priority LOW 35
A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00578 · Published 2021-10-21 · No fix listed CWE-787
Priority LOW 35
A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0111 · Published 2021-10-21 · No fix listed CWE-476
Priority LOW 35
A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00795 · Published 2020-09-01 · No fix listed CWE-59
Priority LOW 35
A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on th…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00783 · Published 2020-09-01 · No fix listed CWE-59
Priority LOW 34
A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher l…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00274 · Published 2022-01-08 · No fix listed CWE-346
Priority LOW 34
Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installati…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00412 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 32
An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected inst…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00283 · Published 2025-06-17 · Fixed in 6.7.3954 / 14.3.1299 CWE-427
Priority LOW 32
A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00633 · Published 2020-09-01 · No fix listed CWE-125
Priority LOW 31
A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2022-01-08 · No fix listed CWE-59
Priority LOW 31
A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files i…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2022-01-08 · No fix listed CWE-59
Priority LOW 31
Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04168 · Published 2016-06-19 · No fix listed CWE-22
Priority LOW 30
CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) at…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01589 · Published 2016-06-19 · No fix listed CWE-79