CVE-2025-47867

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations...

CVE-2025-47867

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations...

CVE-2025-47866

The CVE-2025-47866 vulnerability is in Trend Micro Apex Central, specifically the modTMCM widget, and affects installations running versions prior to 8.0.6955. The issue stems from insufficient validation in the modTMCM webapp widget, enabling an attacker to upload arbitrary files to affected sys...

CVE-2025-47866

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations...

CVE-2025-47866

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations...

CVE-2025-47865

CVE-2025-47865 : A Local File Inclusion vulnerability affects Trend Micro Apex Central widget in versions below 8.0.6955. The flaw exists in the getObjWGFServiceApiByApiName function and can lead to remote code execution on affected installations. Exploitation details in public disclosures indica...

CVE-2025-47865

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations...

CVE-2025-47865

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations...

CVE-2025-47866: Undefined Behavior for Input to API

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations...

CVE-2025-49215: Use of Inherently Dangerous Function

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this...

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link-following issue that could lead to elevated privileges...

PT-2025-53551

Уязвимость функции ProcessWhereClause сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption TMEE связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

Trend Micro Password Manager 安全漏洞

Trend Micro Password Manager is a Trend Micro application for managing website passwords and login IDs. A security vulnerability exists in Trend Micro Password Manager version 5.0.0.1266 and prior versions, which stems from a link following issue that could lead to a local elevation of privilege...

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from a link-following issue that could lead to local elevation of privilege...

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from an uncontrolled search path that could lead to local elevation of privilege...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from improper deserialization and could lead to remote code execution after authentication...

PT-2025-53550

Уязвимость функции GetGroupFilteredUsers сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption TMEE связана с использованием изначально опасной функции. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

Trend Micro Apex One和Trend Micro Worry-Free Business Security Services 访问控制错误漏洞

Trend Micro Apex One and Trend Micro Worry-Free Business Security Services are both products of Trend Micro, Inc.Trend Micro Apex One is an endpoint protection software.Trend Micro Worry -Free Business Security Services is an endpoint security solution. A security vulnerability exists in Trend...

CVE-2025-49213: Use of Obsolete Function

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method...

CVE-2025-49385: Windows Shortcut Following (.LNK)

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...