Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority LOW 35

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-427
Priority LOW 35

A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-269
Priority LOW 35

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00151 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-269
Priority MEDIUM 42

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00915 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 CWE-427
Priority LOW 36

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.0012 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284