Trend Micro, Inc. vulnerabilities, page 5

180 vulnerabilities

Known vulnerabilities in Trend Micro, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 33 products.

7.8CVE-2024-36303trend micro, inc.trend micro apex one+2
EPSS score
0.35%
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2024-36302.5.4CVE-2024-36359trend micro, inc.trend micro interscan web security virtual appliance+1
EPSS score
0.38%
A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.5.5CVE-2024-36307trend micro, inc.trend micro apex one+2
EPSS score
0.78%
A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.5.3CVE-2024-36473trend micro, inc.trend micro vpn proxy one pro+1
EPSS score
0.21%
Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial of Service (DoS) and under specific conditions can lead to elevation of privileges.6.1CVE-2024-36306trend micro, inc.trend micro apex one+2
EPSS score
0.61%
A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.7.8CVE-2024-36358trend micro, inc.trend micro deep security agent+1
EPSS score
0.53%
A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.7.5CVE-2024-39753trend micro, inc.trend micro apex one+2
EPSS score
2.00%
An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.7.8CVE-2024-37289trend micro, inc.trend micro apex one+2
EPSS score
0.63%
An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.8.2CVE-2024-53647trend micro, inc.trend micro id security+1
EPSS score
0.31%
Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email verification requests without any restriction, potentially leading to abuse or denial of service.7.8CVE-2024-58105trend micro, inc.trend micro apex one+2
EPSS score
0.16%
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. This CVE address an addtional bypass not covered in CVE-2024-58104. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.7.8CVE-2024-58104trend micro, inc.trend micro apex one+2
EPSS score
0.16%
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.6.5CVE-2024-46903trend micro, inc.trend micro deep discovery inspector+1
EPSS score
1.23%
A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.9.1CVE-2024-46902trend micro, inc.trend micro deep discovery inspector+1
EPSS score
0.69%
A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code (admin user rights) on the target system in order to exploit this vulnerability.8.4CVE-2024-45335trend micro, inc.trend micro antivirus one+1
EPSS score
0.17%
Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection.7.8CVE-2024-45334trend micro, inc.trend micro antivirus one+1
EPSS score
0.13%
Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations and functions.7.8CVE-2024-32849trend micro, inc.trend micro maximum security (consumer)+2
EPSS score
0.26%
Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.7.8CVE-2024-23940trend micro, inc.trend micro security (consumer) uiairsupport+5
EPSS score
0.64%
Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and ultimately escalate privileges on an affected system.7.8CVE-2026-45207trend micro, inc.trendai apex one+2
EPSS score
0.10%
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.7.8CVE-2026-45208trend micro, inc.trendai apex one+2
EPSS score
0.13%
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.7.8CVE-2026-45206trend micro, inc.trendai apex one+2
EPSS score
0.10%
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.