TR
Vendor
Trendmicro
734
CVEs
17
On KEV
0
New 30D
Products
OF9.8
Officescan
Trendmicro
71 CVEs6 on KEV0 new
WB9.8
Worry-free Business Security
Trendmicro
58 CVEs5 on KEV0 new
OB8.8
Officescan Business Security
Trendmicro
3 CVEs2 on KEV0 new
AC9.8
Apex Central
Trendmicro
35 CVEs1 on KEV0 new
WB9.8
Worry-free Business Security Services
Trendmicro
25 CVEs1 on KEV0 new
TA9.8
TrendAI Apex One as a Service
Trend Micro, Inc.
18 CVEs1 on KEV0 new
TA9.8
TrendAI Apex One
Trend Micro, Inc.
12 CVEs1 on KEV0 new
IW9.9
Interscan Web Security Virtual Appliance
Trendmicro
29 CVEs0 on KEV0 new
CM10.0
Control Manager
Trendmicro
22 CVEs0 on KEV0 new
MS9.8
Mobile Security
Trendmicro
21 CVEs0 on KEV0 new
EE9.8
Email Encryption Gateway
Trendmicro
19 CVEs0 on KEV0 new
AN7.8
Antivirus+
Trendmicro
18 CVEs0 on KEV0 new
SE9.8
Serverprotect
Trendmicro
18 CVEs0 on KEV0 new
IS9.8
Internet Security
Trendmicro
17 CVEs0 on KEV0 new
TM8.8
Trend Micro Deep Security
Trend Micro, Inc.
15 CVEs0 on KEV0 new
PM9.8
Password Manager
Trendmicro
15 CVEs0 on KEV0 new
IM8.8
Interscan Messaging Security Virtual Appliance
Trendmicro
13 CVEs0 on KEV0 new
MS9.8
Maximum Security
Trendmicro
13 CVEs0 on KEV0 new
PS9.8
Premium Security
Trendmicro
13 CVEs0 on KEV0 new
SP9.8
Smart Protection Server
Trendmicro
13 CVEs0 on KEV0 new
MS9.8
Maximum Security 2020
Trendmicro
12 CVEs0 on KEV0 new
TD9.8
Threat Discovery Appliance
Trendmicro
12 CVEs0 on KEV0 new
IS9.8
Internet Security 2020
Trendmicro
11 CVEs0 on KEV0 new
PS9.8
Premium Security 2020
Trendmicro
11 CVEs0 on KEV0 new
HO7.8
Housecall
Trendmicro
9 CVEs0 on KEV0 new
TM9.8
Trend Micro Endpoint Encryption
Trendmicro
9 CVEs0 on KEV0 new
AS9.8
Antivirus + Security 2020
Trendmicro
8 CVEs0 on KEV0 new
MS7.8
Maximum Security 2019
Trendmicro
8 CVEs0 on KEV0 new
SE7.8
Security
Trendmicro
8 CVEs0 on KEV0 new
TM–
Trend Micro Antivirus
Trendmicro
8 CVEs0 on KEV0 new
AS9.8
Antivirus + Security
Trendmicro
7 CVEs0 on KEV0 new
DS7.8
Deep Security
Trendmicro
7 CVEs0 on KEV0 new
HF7.8
Housecall For Home Networks
Trendmicro
7 CVEs0 on KEV0 new
IS7.8
Internet Security 2019
Trendmicro
7 CVEs0 on KEV0 new
MS7.8
Maximum Security 2022
Trendmicro
7 CVEs0 on KEV0 new
PS7.8
Premium Security 2019
Trendmicro
7 CVEs0 on KEV0 new
DD9.1
Deep Discovery Inspector
Trendmicro
6 CVEs0 on KEV0 new
SC9.1
Scanmail
Trendmicro
6 CVEs0 on KEV0 new
AF7.8
Antivirus For Mac 2017
Trendmicro
5 CVEs0 on KEV0 new
AF7.8
Antivirus For Mac 2018
Trendmicro
5 CVEs0 on KEV0 new
AF7.8
Antivirus For Mac 2019
Trendmicro
5 CVEs0 on KEV0 new
AS7.8
Antivirus + Security 2019
Trendmicro
5 CVEs0 on KEV0 new
HN7.8
Home Network Security
Trendmicro
5 CVEs0 on KEV0 new
MS7.8
Maximum Security 2021
Trendmicro
5 CVEs0 on KEV0 new
TV9.0
Trend Vision One
Trendmicro
5 CVEs0 on KEV0 new
VP8.1
Vulnerability Protection
Trendmicro
5 CVEs0 on KEV0 new
DS8.1
Deep Security Manager
Trendmicro
4 CVEs0 on KEV0 new
OC7.5
Officescan Cloud
Trendmicro
4 CVEs0 on KEV0 new
SF9.8
Serverprotect For Storage
Trendmicro
4 CVEs0 on KEV0 new
A27.8
Antivirus+ 2020
Trendmicro
3 CVEs0 on KEV0 new
AS7.8
Antivirus+ Security 2021
Trendmicro
3 CVEs0 on KEV0 new
DD9.8
Deep Discovery Director
Trendmicro
3 CVEs0 on KEV0 new
ES7.8
Endpoint Sensor
Trendmicro
3 CVEs0 on KEV0 new
IS7.8
Internet Security 2021
Trendmicro
3 CVEs0 on KEV0 new
IM–
Interscan Messaging Security Suite
Trendmicro
3 CVEs0 on KEV0 new
PS7.8
Premium Security 2021
Trendmicro
3 CVEs0 on KEV0 new
SF9.8
Serverprotect For Network Appliance Filer
Trendmicro
3 CVEs0 on KEV0 new
AT7.8
Anti-threat Toolkit
Trendmicro
2 CVEs0 on KEV0 new
A27.5
Antivirus+ 2019
Trendmicro
2 CVEs0 on KEV0 new
AO7.8
Antivirus One
Trendmicro
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45208 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-45207 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-45206 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34930 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34929 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34928 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34927 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations |
| CVE-2026-34926 In wildKEV | TA TrendAI Apex One as a Service Trend Micro, Inc. | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability |
| CVE-2025-71213 | TA TrendAI Apex One Trend Micro, Inc. | 7.8 | May 21 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-71212 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 7.8 | May 21 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-71211 | TA TrendAI Apex One Trend Micro, Inc. | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations |
| CVE-2025-71210 | TA TrendAI Apex One as a Service Trend Micro, Inc. | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations |
| CVE-2025-69260 | AC Apex Central Trendmicro | 7.5 | Jan 8 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations |
| CVE-2025-69259 | AC Apex Central Trendmicro | 7.5 | Jan 8 | A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations |
| CVE-2025-69258 | AC Apex Central Trendmicro | 9.8 | Jan 8 | A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to… |
| CVE-2025-53503 | CO Cleaner One Trendmicro | 7.8 | Jul 10 | Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files… |
| CVE-2025-53378 | WB Worry-free Business Security Services Trendmicro | 9.8 | Jul 10 | A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control… |
| CVE-2025-52837 | PM Password Manager Trendmicro | 7.8 | Jul 10 | Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the… |
| CVE-2025-52521 | MS Maximum Security 2022 Trendmicro | 7.1 | Jul 10 | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete… |
| CVE-2025-49385 | MS Maximum Security 2022 Trendmicro | 7.1 | Jun 17 | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete… |
| CVE-2025-49384 | MS Maximum Security 2022 Trendmicro | 7.1 | Jun 17 | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete… |
| CVE-2025-49218 | TM Trend Micro Endpoint Encryption Trendmicro | 7.8 | Jun 17 | A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations |
| CVE-2025-49217 | TM Trend Micro Endpoint Encryption Trendmicro | 9.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49216 | TM Trend Micro Endpoint Encryption Trendmicro | 9.8 | Jun 17 | An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product… |
| CVE-2025-49215 | TM Trend Micro Endpoint Encryption Trendmicro | 8.8 | Jun 17 | A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations |
| CVE-2025-49214 | TM Trend Micro Endpoint Encryption Trendmicro | 8.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations |
| CVE-2025-49213 | TM Trend Micro Endpoint Encryption Trendmicro | 9.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49212 | TM Trend Micro Endpoint Encryption Trendmicro | 9.8 | Jun 17 | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49211 | TM Trend Micro Endpoint Encryption Trendmicro | 7.8 | Jun 17 | A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations |
| CVE-2025-48443 | PM Password Manager Trendmicro | 6.6 | Jun 17 | Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker… |
| CVE-2025-30642 | DS Deep Security Agent Trendmicro | 5.5 | Jun 17 | A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations |
| CVE-2025-30641 | DS Deep Security Agent Trendmicro | 7.8 | Jun 17 | A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected… |
| CVE-2025-30640 | DS Deep Security Agent Trendmicro | 7.8 | Jun 17 | A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations |
| CVE-2025-30680 | AC Apex Central Trendmicro | 7.1 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on… |
| CVE-2025-30679 | AC Apex Central Trendmicro | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to… |
| CVE-2025-30678 | AC Apex Central Trendmicro | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to… |
| CVE-2025-49487 | WB Worry-free Business Security Services Trendmicro | 6.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine… |
| CVE-2025-49154 | WB Worry-free Business Security Trendmicro | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… |
| CVE-2025-49220 | AC Apex Central Trendmicro | 9.8 | Jun 17 | An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-49219 | AC Apex Central Trendmicro | 9.8 | Jun 17 | An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations |
| CVE-2025-47867 | AC Apex Central Trendmicro | 9.8 | Jun 17 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and… |
| CVE-2025-47866 | AC Apex Central Trendmicro | 7.5 | Jun 17 | An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations |
| CVE-2025-47865 | AC Apex Central Trendmicro | 9.8 | Jun 17 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations |
| CVE-2025-31286 | TV Trend Vision One Trendmicro | 9.0 | Apr 2 | An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code |
| CVE-2025-31285 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create users who could then change… |
| CVE-2025-31284 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create users who could then change the… |
| CVE-2025-31283 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to create users who could then change… |
| CVE-2025-31282 | TV Trend Vision One Trendmicro | 7.2 | Apr 2 | A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to create users who could then… |
| CVE-2022-28339 | HF Housecall For Home Networks Trendmicro | 7.8 | Feb 22 | Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user… |
| CVE-2024-55955 | TM Trend Micro Deep Security Trend Micro, Inc. | 7.3 | Dec 31 | An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate… |
| CVE-2024-55917 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-55632 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-55631 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-53647 | TM Trend Micro ID Security Trend Micro, Inc. | 8.2 | Dec 31 | Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email verification requests without any… |
| CVE-2024-52050 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-52049 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-52048 | TM Trend Micro Apex One as a Service Trend Micro, Inc. | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations |
| CVE-2024-51503 | DS Deep Security Agent Trendmicro | 8.8 | Nov 19 | A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on… |
| CVE-2024-48904 | CE Cloud Edge Trendmicro | 9.8 | Oct 22 | An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances |
| CVE-2024-48903 | DS Deep Security Agent Trendmicro | 7.8 | Oct 22 | An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations |