WB
Product
Worry-free Business Security Services
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 21Medium 3Low 0
Watch
Add Worry-free Business Security Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41179 In wildKEV | 7.2 | Sep 19 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Affected: 0 |
| CVE-2025-53378 | 9.8 | Jul 10 | A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control… Affected: 6.7.0.0 before 6.7.3954; 14.0.0 before 14.3.1299 |
| CVE-2025-49154 | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… Affected: 6.7.0.0 before 6.7.3954; 14.0.0 before 14.3.1299 |
| CVE-2022-36336 | 7.8 | Jul 29 | A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on… Affected: All versions, or not specified |
| CVE-2022-24680 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: All versions, or not specified |
| CVE-2022-24679 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: All versions, or not specified |
| CVE-2021-45441 | 7.8 | Jan 10 | A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over… Affected: All versions, or not specified |
| CVE-2021-45440 | 7.8 | Jan 10 | A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse… Affected: All versions, or not specified |
| CVE-2021-45231 | 7.8 | Jan 10 | A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a… Affected: All versions, or not specified |
| CVE-2021-42108 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to… Affected: All versions, or not specified |
| CVE-2021-42107 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: All versions, or not specified |
| CVE-2021-42106 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: All versions, or not specified |
| CVE-2021-42105 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: All versions, or not specified |
| CVE-2021-42104 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: All versions, or not specified |
| CVE-2021-42012 | 7.8 | Oct 21 | A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate… Affected: All versions, or not specified |
| CVE-2020-24559 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain… Affected: All versions, or not specified |
| CVE-2020-24556 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an… Affected: All versions, or not specified |
| CVE-2022-24678 | 7.5 | Feb 24 | An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: All versions, or not specified |
| CVE-2021-23139 | 7.5 | Oct 21 | A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations Affected: All versions, or not specified |
| CVE-2021-45442 | 7.1 | Jan 10 | A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the… Affected: All versions, or not specified |
| CVE-2021-44024 | 7.1 | Jan 10 | A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a… Affected: All versions, or not specified |
| CVE-2020-24558 | 7.1 | Sep 1 | A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an… Affected: All versions, or not specified |
| CVE-2025-49487 | 6.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine… Affected: 6.7.0.0 before 6.7.3954; 14.0.0 before 14.3.1299 |
| CVE-2016-1224 | 6.1 | Jun 19 | CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers… Affected: 5.0 |
| CVE-2016-1223 | 5.3 | Jun 19 | Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read… Affected: 5.0 |
Showing 25