Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

25 records

Priority MEDIUM 43

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2025-07-10 Fixed in 6.7.3954 / 14.3.1299 CWE-306
Priority LOW 32

An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected inst…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00283 Published 2025-06-17 Fixed in 6.7.3954 / 14.3.1299 CWE-427
Priority LOW 36

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.0012 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284
TI-2023-21788 CVE-2023-41179 · GHSA-vq2c-8m6j-g4vh

Code injection in Trend Micro Apex One

Priority CRITICAL 91KEV

A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate th…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04216 Published 2023-09-19 Fixed in 14.0.0.12380, 14.0.12637 +2 CWE-94
TI-2022-16679 CVE-2022-36336 · GHSA-j3r2-6983-xh2v

Link following in Trend Micro Apex One

Priority LOW 35

A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00571 Published 2022-07-29 No fix listed CWE-59
TI-2022-08498 CVE-2022-24680 · GHSA-qx5j-pc38-3g95

Link following in Trend Micro Apex One

Priority LOW 35

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2022-02-24 No fix listed CWE-59
TI-2022-08497 CVE-2022-24679 · GHSA-wc94-2wcf-jwvr

Link following in Trend Micro Apex One

Priority LOW 35

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2022-02-24 No fix listed CWE-59
Priority LOW 37

An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Secu…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02335 Published 2022-02-24 No fix listed CWE-400
Priority LOW 31

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00413 Published 2022-01-08 No fix listed CWE-59
Priority LOW 34

A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher l…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00274 Published 2022-01-08 No fix listed CWE-346
Priority LOW 35

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00479 Published 2022-01-08 No fix listed CWE-269
TI-2021-20452 CVE-2021-45231 · GHSA-c7c6-gf69-v976

Link following in Trend Micro Apex One

Priority LOW 35

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially craft…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00664 Published 2022-01-08 No fix listed CWE-59
TI-2021-19776 CVE-2021-44024 · GHSA-h7p6-f3w3-3x2g

Link following in Trend Micro Apex One

Priority LOW 31

A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files i…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00413 Published 2022-01-08 No fix listed CWE-59
Priority LOW 34

Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installati…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00412 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
Priority LOW 34

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2021-10-21 No fix listed CWE-269
TI-2021-18534 CVE-2021-42012 · GHSA-m654-qf29-wq6w

Out-of-bounds write in Trend Micro Apex One

Priority LOW 35

A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00578 Published 2021-10-21 No fix listed CWE-787
Priority LOW 35

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0111 Published 2021-10-21 No fix listed CWE-476
TI-2020-15040 CVE-2020-24559 · GHSA-hq4h-fvjm-7fqw

Link following in Trend Micro Apex One

Priority LOW 35

A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00795 Published 2020-09-01 No fix listed CWE-59
TI-2020-15039 CVE-2020-24558 · GHSA-63vj-8rg8-54wf

Out-of-bounds read in Trend Micro Apex One

Priority LOW 32

A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00633 Published 2020-09-01 No fix listed CWE-125
TI-2020-15037 CVE-2020-24556 · GHSA-28fh-4j57-cc4w

Link following in Trend Micro Apex One

Priority LOW 35

A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on th…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00783 Published 2020-09-01 No fix listed CWE-59
Priority LOW 30

CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) at…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01589 Published 2016-06-19 No fix listed CWE-79