CVE-2025-30641: Improper Link Resolution Before File Access

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...

Trend Micro Security 安全漏洞

Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from improper link following and could lead to local elevation of privilege...

PT-2025-25746

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Worry-Free Business Security affected versions not specified Description An insecure access control issue could allow a local attacker to overwrite key memory-mapped files,...

Trend Micro Endpoint Encryption PolicyServer SQL注入漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from a post-authentication SQL injection issue that could result in elevated privileges...

CVE-2025-47865: Undefined Behavior for Input to API

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from a post-authentication SQL injection issue that could result in elevated privileges...

CVE-2025-30679: Server-Side Request Forgery (SSRF)

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from an authentication bypass issue that could result in modification of the product configuration...

CVE-2025-30680: Server-Side Request Forgery (SSRF)

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central SaaS could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that...

Trend Micro Security 安全漏洞

Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from improper link following and could lead to local elevation of privilege...

CVE-2025-30642: Improper Link Resolution Before File Access

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

CVE-2025-30640: Improper Link Resolution Before File Access

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

Trend Micro Apex Central 代码问题漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A code issue vulnerability exists in Trend Micro Apex Central that stems from vulnerability to server-side request forgery attacks that could lead to information disclosure...

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security protection system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link following issue in the anti-malware component that could lead to elevated privileges...

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link-following issue that could lead to a denial of service...

CVE-2025-49211: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability...

CVE-2025-47867: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations...

Trend Micro Endpoint Encryption PolicyServer SQL注入漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from a SQL injection issue that could result in elevated privileges...

Trend Micro Worry-Free Business Security Services 代码问题漏洞

Trend Micro Worry-Free Business Security Services is an endpoint security solution from Trend Micro. A security vulnerability exists in Trend Micro Worry-Free Business Security Services that stems from an uncontrolled search path that could lead to the execution of arbitrary code...

CVE-2025-49217: Use of Obsolete Function

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method...