Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

180 records

Priority LOW 36

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.003 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-367
TI-2026-33024 CVE-2026-45207 · GHSA-v27h-98f7-4563

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-33023 CVE-2026-45206 · GHSA-3m5q-2hhf-3c5f

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27154 CVE-2026-34930 · GHSA-w6rw-fq38-ch7g

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27153 CVE-2026-34929 · GHSA-ff4m-qxjh-q4cw

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00246 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27152 CVE-2026-34928 · GHSA-74v9-v9f7-f4p8

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27151 CVE-2026-34927 · GHSA-c93p-h3cc-p7rr

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00246 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27150 CVE-2026-34926 · GHSA-4ccp-cqrh-3w9v

Path traversal in TrendAI Apex One

Priority CRITICAL 89KEV

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installa…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.1342 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-23
TI-2025-43352 CVE-2025-71217 · GHSA-8q9p-gxfg-8f5c

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00295 Published 2026-05-21 Fixed in NA CWE-346
Priority LOW 36

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00323 Published 2026-05-21 Fixed in NA CWE-367
Priority LOW 33

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00301 Published 2026-05-21 Fixed in NA CWE-367
TI-2025-43349 CVE-2025-71214 · GHSA-jp6w-rffw-m64m

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00357 Published 2026-05-21 Fixed in NA CWE-346
TI-2025-43348 CVE-2025-71213 · GHSA-gjcg-gjrc-j6xp

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-346
TI-2025-43347 CVE-2025-71212 · GHSA-mp94-hxv8-mxq5

Link following in TrendAI Apex One

Priority LOW 37

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00544 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-59
TI-2025-43346 CVE-2025-71211 · GHSA-qvww-2vwg-9rp6

Path traversal in TrendAI Apex One

Priority MEDIUM 55

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03754 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-22
TI-2025-43345 CVE-2025-71210 · GHSA-vhc8-fg3x-3rvc

Path traversal in TrendAI Apex One

Priority MEDIUM 55

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03811 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-22
TI-2025-34693 CVE-2025-54987 · GHSA-8q59-7jj3-fj58

OS command injection in Trend Micro Apex One

Priority HIGH 71

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.27302 Published 2025-08-05 Fixed in 14.0.0.14039 CWE-78
TI-2025-34668 CVE-2025-54948 · GHSA-9r9v-427h-5388

OS command injection in Trend Micro Apex One

Priority CRITICAL 100KEV

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.32872 Published 2025-08-05 Fixed in 14.0.0.14039 CWE-78
Priority LOW 35

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-427
Priority LOW 35

A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-269
Priority LOW 35

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00151 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-269
Priority MEDIUM 42

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00915 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-427
Priority LOW 36

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.0012 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284
Priority LOW 35

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2025-03-25 Fixed in 14.0.0.13122, 14.0.13260 CWE-286
Priority LOW 35

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2025-03-25 Fixed in 14.0.0.13122, 14.0.13260 CWE-269
Load more