Read the docs
TI-2024-24150 Aliases CVE-2024-36358GHSA-7333-wpqm-63v7

A link following vulnerability in Trend Micro Deep Security 20.x agents below build…

Priority LOW 37CWE-1106Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00532 45th percentileScored 2026-11-07
Fix Fixed Trend Micro Deep Security Agent (Trend Micro, Inc.): 20.0.1-3180

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Trend MicroTrend Micro Deep Security Agent20 to before 20.0.1-318020.0.1-3180Patch availableCNA
  • Trend Micro Deep Security Agent VendorTrend Micro Affected 20 to before 20.0.1-3180 Fixed in 20.0.1-3180 Patch available CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1194:*:*:long_term_support:*:*:*20.0 update1194VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1304:*:*:long_term_support:*:*:*20.0 update1304VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*20.0 update1337VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*20.0 update1559VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*20.0 update1681VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*20.0 update1822VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*20.0 update1876VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*20.0 update2009VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*20.0 update2204VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:*20.0 update2395VulnerableTrendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1194:*:*:long_term_support:*:*:* Versions 20.0 update1194 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1304:*:*:long_term_support:*:*:* Versions 20.0 update1304 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:* Versions 20.0 update1337 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:* Versions 20.0 update1559 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:* Versions 20.0 update1681 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:* Versions 20.0 update1822 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:* Versions 20.0 update1876 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:* Versions 20.0 update2009 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:* Versions 20.0 update2204 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:* Versions 20.0 update2395 Vulnerable ·Trendmicro
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*20.0 update2593VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2971:*:*:long_term_support:*:*:*20.0 update2971VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*20.0 update3165VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*20.0 update3288VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*20.0 update3445VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3770:*:*:long_term_support:*:*:*20.0 update3770VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*20.0 update4185VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*20.0 update4416VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*20.0 update4726VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*20.0 update4959VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*20.0 update5137VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:*20.0 update5394VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:*20.0 update5512VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:*20.0 update5761VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5953:*:*:long_term_support:*:*:*20.0 update5953VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:*20.0 update6313VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6658:*:*:long_term_support:*:*:*20.0 update6658VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6912:*:*:long_term_support:*:*:*20.0 update6912VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:*20.0 update7119VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:*20.0 update7303VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:*20.0 update7476VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:*20.0 update7719VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:*20.0 update7943VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:*20.0 update8137VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:*20.0 update8268VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:*20.0 update8438VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8453:*:*:long_term_support:*:*:*20.0 update8453VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*20.0 update877VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*20.0.1 update690VulnerableTrendmicro
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2419:*:*:long_term_support:*:*:*20.0 update2419VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:*20.0 update2740VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:*20.0 update2921VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3530:*:*:long_term_support:*:*:*20.0 update3530VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3771:*:*:long_term_support:*:*:*20.0 update3771VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:*20.0 update3964VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5810:*:*:long_term_support:*:*:*20.0 update5810VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5995:*:*:long_term_support:*:*:*20.0 update5995VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6690:*:*:long_term_support:*:*:*20.0 update6690VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6860:*:*:long_term_support:*:*:*20.0 update6860VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update700:*:*:long_term_support:*:*:*20.0.1 update700VulnerableTrendmicro
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*not specified by NVDRunning onOpengroup
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:* Versions 20.0 update2593 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2971:*:*:long_term_support:*:*:* Versions 20.0 update2971 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:* Versions 20.0 update3165 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:* Versions 20.0 update3288 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:* Versions 20.0 update3445 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3770:*:*:long_term_support:*:*:* Versions 20.0 update3770 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:* Versions 20.0 update4185 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:* Versions 20.0 update4416 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:* Versions 20.0 update4726 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:* Versions 20.0 update4959 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:* Versions 20.0 update5137 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:* Versions 20.0 update5394 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:* Versions 20.0 update5512 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:* Versions 20.0 update5761 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5953:*:*:long_term_support:*:*:* Versions 20.0 update5953 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:* Versions 20.0 update6313 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6658:*:*:long_term_support:*:*:* Versions 20.0 update6658 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6912:*:*:long_term_support:*:*:* Versions 20.0 update6912 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:* Versions 20.0 update7119 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:* Versions 20.0 update7303 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:* Versions 20.0 update7476 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:* Versions 20.0 update7719 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:* Versions 20.0 update7943 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:* Versions 20.0 update8137 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:* Versions 20.0 update8268 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:* Versions 20.0 update8438 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8453:*:*:long_term_support:*:*:* Versions 20.0 update8453 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:* Versions 20.0 update877 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:* Versions 20.0.1 update690 Vulnerable ·Trendmicro
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2419:*:*:long_term_support:*:*:* Versions 20.0 update2419 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:* Versions 20.0 update2740 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:* Versions 20.0 update2921 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3530:*:*:long_term_support:*:*:* Versions 20.0 update3530 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3771:*:*:long_term_support:*:*:* Versions 20.0 update3771 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:* Versions 20.0 update3964 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5810:*:*:long_term_support:*:*:* Versions 20.0 update5810 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5995:*:*:long_term_support:*:*:* Versions 20.0 update5995 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6690:*:*:long_term_support:*:*:* Versions 20.0 update6690 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6860:*:*:long_term_support:*:*:* Versions 20.0 update6860 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update700:*:*:long_term_support:*:*:* Versions 20.0.1 update700 Vulnerable ·Trendmicro
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Opengroup

Remediation

  • Fix · CNA Trend Micro Deep Security Agent (Trend Micro, Inc.) Fixed in 20.0.1-3180

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-36358
  2. 2026-10-03 Alias added: GHSA-7333-wpqm-63v7

References

Advisory 1

Other 1

  • TI-2025-34668 OS command injection in Trend Micro Apex One KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-10115 Insufficient verification of data authenticity in Trend Micro Apex Central KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-06895 Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-14867 Unrestricted file upload in Trend Micro Apex One KEVCVSS 3.1HIGH 8.8
  • TI-2020-06795 Injection in Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free… KEVCVSS 3.1HIGH 8.8
  • TI-2020-06794 A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a… KEVCVSS 3.1HIGH 8.8
See all 603 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences