Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

58 records

Priority LOW 36

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.0012 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284
TI-2023-21788 CVE-2023-41179 · GHSA-vq2c-8m6j-g4vh

Code injection in Trend Micro Apex One

Priority CRITICAL 91KEV

A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate th…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04216 Published 2023-09-19 Fixed in 14.0.0.12380, 14.0.12637 +2 CWE-94
TI-2022-16679 CVE-2022-36336 · GHSA-j3r2-6983-xh2v

Link following in Trend Micro Apex One

Priority LOW 35

A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00571 Published 2022-07-29 No fix listed CWE-59
TI-2022-08498 CVE-2022-24680 · GHSA-qx5j-pc38-3g95

Link following in Trend Micro Apex One

Priority LOW 35

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2022-02-24 No fix listed CWE-59
TI-2022-08497 CVE-2022-24679 · GHSA-wc94-2wcf-jwvr

Link following in Trend Micro Apex One

Priority LOW 35

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2022-02-24 No fix listed CWE-59
Priority LOW 37

An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Secu…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02335 Published 2022-02-24 No fix listed CWE-400
Priority LOW 33

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00737 Published 2022-02-04 No fix listed CWE-125
Priority LOW 31

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00413 Published 2022-01-08 No fix listed CWE-59
Priority LOW 34

A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher l…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00274 Published 2022-01-08 No fix listed CWE-346
Priority LOW 35

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00479 Published 2022-01-08 No fix listed CWE-269
TI-2021-20452 CVE-2021-45231 · GHSA-c7c6-gf69-v976

Link following in Trend Micro Apex One

Priority LOW 35

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially craft…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00664 Published 2022-01-08 No fix listed CWE-59
TI-2021-19776 CVE-2021-44024 · GHSA-h7p6-f3w3-3x2g

Link following in Trend Micro Apex One

Priority LOW 31

A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files i…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00413 Published 2022-01-08 No fix listed CWE-59
Priority LOW 34

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0035 Published 2021-12-03 No fix listed CWE-269
Priority LOW 34

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0035 Published 2021-12-03 No fix listed CWE-269
Priority LOW 34

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0035 Published 2021-12-03 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installati…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00412 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
TI-2021-18534 CVE-2021-42012 · GHSA-m654-qf29-wq6w

Out-of-bounds write in Trend Micro Apex One

Priority LOW 35

A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00578 Published 2021-10-21 No fix listed CWE-787
Priority LOW 35

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0111 Published 2021-10-21 No fix listed CWE-476
Priority CRITICAL 93KEV

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01482 Published 2021-07-29 No fix listed CWE-20
Priority CRITICAL 97KEV

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installat…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04951 Published 2021-07-29 No fix listed CWE-434
Load more