Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

575 records

Priority LOW 36

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.003 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-367
TI-2026-33024 CVE-2026-45207 · GHSA-v27h-98f7-4563

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-33023 CVE-2026-45206 · GHSA-3m5q-2hhf-3c5f

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27154 CVE-2026-34930 · GHSA-w6rw-fq38-ch7g

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27153 CVE-2026-34929 · GHSA-ff4m-qxjh-q4cw

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00246 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27152 CVE-2026-34928 · GHSA-74v9-v9f7-f4p8

Origin validation error in TrendAI Apex One

Priority LOW 35

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27151 CVE-2026-34927 · GHSA-c93p-h3cc-p7rr

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00246 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-346
TI-2026-27150 CVE-2026-34926 · GHSA-4ccp-cqrh-3w9v

Path traversal in TrendAI Apex One

Priority CRITICAL 89KEV

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installa…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.1342 Published 2026-05-21 Fixed in 14.0.0.17079, 14.0.20731 CWE-23
TI-2025-43352 CVE-2025-71217 · GHSA-8q9p-gxfg-8f5c

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00295 Published 2026-05-21 Fixed in NA CWE-346
Priority LOW 36

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00323 Published 2026-05-21 Fixed in NA CWE-367
Priority LOW 33

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00301 Published 2026-05-21 Fixed in NA CWE-367
TI-2025-43349 CVE-2025-71214 · GHSA-jp6w-rffw-m64m

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00357 Published 2026-05-21 Fixed in NA CWE-346
TI-2025-43348 CVE-2025-71213 · GHSA-gjcg-gjrc-j6xp

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-346
TI-2025-43347 CVE-2025-71212 · GHSA-mp94-hxv8-mxq5

Link following in TrendAI Apex One

Priority LOW 37

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00544 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-59
TI-2025-43346 CVE-2025-71211 · GHSA-qvww-2vwg-9rp6

Path traversal in TrendAI Apex One

Priority MEDIUM 55

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03754 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-22
TI-2025-43345 CVE-2025-71210 · GHSA-vhc8-fg3x-3rvc

Path traversal in TrendAI Apex One

Priority MEDIUM 55

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03811 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-22
TI-2025-42711 CVE-2025-69260 · GHSA-p5v2-mqcc-2j93

Buffer overflow in Trend Micro Apex Central

Priority MEDIUM 42

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01576 Published 2026-01-08 Fixed in Build 7190 CWE-120
TI-2025-42710 CVE-2025-69259 · GHSA-f57h-h252-h773

Buffer overflow in Trend Micro Apex Central

Priority MEDIUM 42

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01576 Published 2026-01-08 Fixed in Build 7190 CWE-120
TI-2025-42709 CVE-2025-69258 · GHSA-mf42-gw23-xrx2

Buffer overflow in Trend Micro Apex Central

Priority MEDIUM 55

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03574 Published 2026-01-08 Fixed in Build 7190 CWE-120
TI-2025-34693 CVE-2025-54987 · GHSA-8q59-7jj3-fj58

OS command injection in Trend Micro Apex One

Priority HIGH 71

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.27302 Published 2025-08-05 Fixed in 14.0.0.14039 CWE-78
TI-2025-34668 CVE-2025-54948 · GHSA-9r9v-427h-5388

OS command injection in Trend Micro Apex One

Priority CRITICAL 100KEV

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.32872 Published 2025-08-05 Fixed in 14.0.0.14039 CWE-78
Priority MEDIUM 43

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2025-07-10 Fixed in 6.7.3954 / 14.3.1299 CWE-306
Priority LOW 35

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportunity to abuse symbolic links and other met…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00177 Published 2025-07-10 Fixed in 5.8.0.1327 CWE-64
Priority LOW 36

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00384 Published 2025-07-10 Fixed in 17.8.1476 CWE-64
Load more