Priority LOW 36
An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…
CVSS 3.1HIGH 8.7· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2025-06-17 · Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284
Priority CRITICAL 91KEV
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate th…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04216 · Published 2023-09-19 · Fixed in 14.0.0.12380, 14.0.12637 +2 CWE-94
Priority LOW 35
A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00571 · Published 2022-07-29 · No fix listed CWE-59
Priority LOW 35
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00477 · Published 2022-02-24 · No fix listed CWE-59
Priority LOW 35
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00477 · Published 2022-02-24 · No fix listed CWE-59
Priority LOW 37
An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Secu…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02335 · Published 2022-02-24 · No fix listed CWE-400
Priority LOW 33
A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00737 · Published 2022-02-04 · No fix listed CWE-125
Priority LOW 31
A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2022-01-08 · No fix listed CWE-59
Priority LOW 34
A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher l…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00274 · Published 2022-01-08 · No fix listed CWE-346
Priority LOW 35
A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2022-01-08 · No fix listed CWE-269
Priority LOW 35
A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially craft…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00664 · Published 2022-01-08 · No fix listed CWE-59
Priority LOW 31
A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files i…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2022-01-08 · No fix listed CWE-59
Priority LOW 34
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0035 · Published 2021-12-03 · No fix listed CWE-269
Priority LOW 34
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0035 · Published 2021-12-03 · No fix listed CWE-269
Priority LOW 34
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0035 · Published 2021-12-03 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installati…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00412 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 34
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2021-10-21 · No fix listed CWE-269
Priority LOW 35
A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00578 · Published 2021-10-21 · No fix listed CWE-787
Priority LOW 35
A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0111 · Published 2021-10-21 · No fix listed CWE-476
Priority LOW 24
An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services could allow a local attack…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2021-10-06 · No fix listed
Priority CRITICAL 93KEV
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01482 · Published 2021-07-29 · No fix listed CWE-20
Priority CRITICAL 97KEV
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installat…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04951 · Published 2021-07-29 · No fix listed CWE-434
Load more