71 sonuç
7.8Yüksek
CVE-2026-45208
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in o…

7.8Yüksek
CVE-2026-45207
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: a…

7.8Yüksek
CVE-2026-45206
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: a…

7.8Yüksek
CVE-2026-34930
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an attacker mus…

7.8Yüksek
CVE-2026-34929
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note: an att…

7.8Yüksek
CVE-2026-34928
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attack…

7.8Yüksek
CVE-2026-34927
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to…

6.7Orta
CVE-2026-34926 KEV

Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only ex…

13%EPSS
7.8Yüksek
CVE-2025-71217
Trend Micro, Inc. TrendAI Apex One (Mac)

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-…

7.8Yüksek
CVE-2025-71216
Trend Micro, Inc. TrendAI Apex One (Mac)

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privilege…

7.0Yüksek
CVE-2025-71215
Trend Micro, Inc. TrendAI Apex One (Mac)

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to …

7.8Yüksek
CVE-2025-71214
Trend Micro, Inc. TrendAI Apex One (Mac)

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged c…

7.8Yüksek
CVE-2025-71213
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in or…

7.8Yüksek
CVE-2025-71212
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system…

9.8Kritik
CVE-2025-71211
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. …

3.8%EPSS
9.8Kritik
CVE-2025-71210
Trend Micro, Inc. TrendAI Apex One; Trend Micro, Inc. TrendAI Apex One as a Service

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this wa…

3.8%EPSS
7.5Yüksek
CVE-2025-69260
Trend Micro, Inc. Trend Micro Apex Central

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.

1.6%EPSS
7.5Yüksek
CVE-2025-69259
Trend Micro, Inc. Trend Micro Apex Central

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability..

1.6%EPSS
9.8Kritik
CVE-2025-69258
Trend Micro, Inc. Trend Micro Apex Central

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.

3.6%EPSS
9.4Kritik
CVE-2025-54987
Trend Micro, Inc. Trend Micro Apex One

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but t…

27%EPSS
7.8Yüksek
CVE-2025-53503
Trend Micro, Inc. Trend Micro Cleaner One Pro

Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

7.6Yüksek
CVE-2025-53378
Trend Micro, Inc. Trend Micro Worry-Free Business Security Services

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only aff…

7.8Yüksek
CVE-2025-52837
Trend Micro, Inc. Trend Micro Password Manager

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportunity to abuse symbolic links and other methods to delete any file/folder and achi…

7.8Yüksek
CVE-2025-52521
Trend Micro, Inc. Trend Micro Security (Consumer)

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.