CVE-2023-32525

Trend Micro Mobile Security Enterprise 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit thi...

CVE-2023-32524

Affected versions of Trend Micro Mobile Security Enterprise 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-32524

CVE-2023-32524 affects Trend Micro Mobile Security (Enterprise) 9.8 SP5. The vulnerability involves widgets that allow a remote user to bypass authentication and potentially chain with other vulnerabilities. An attacker must first obtain the ability to execute low-privileged code on the target sy...

CVE-2023-32524

Affected versions of Trend Micro Mobile Security Enterprise 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-32523

CVE-2023-32523 affects Trend Micro Mobile Security (Enterprise) version 9.8 SP5. The issue arises in some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2023-32523

Affected versions of Trend Micro Mobile Security Enterprise 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-32523

Affected versions of Trend Micro Mobile Security Enterprise 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-32522

CVE-2023-32522 – Trend Micro Mobile Security (Enterprise) 9.8 SP5 path traversal . Affected software: Trend Micro Mobile Security (Enterprise) 9.8 SP5. Issue: a path traversal exists in a specific DLL that could let an authenticated remote attacker delete arbitrary files. Root cause: untrusted pa...

CVE-2023-32522

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

CVE-2023-32522

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

CVE-2023-32521

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

CVE-2023-32521

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

CVE-2023-32521

CVE-2023-32521 – Path traversal in Trend Micro Mobile Security (Enterprise) 9.8 SP5 . A path traversal vulnerability exists in a specific service dll that could allow an unauthenticated remote attacker to delete arbitrary files. Affected product is Trend Micro Mobile Security for Enterprise (vers...

CVE-2023-30902

A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affected installations...

CVE-2023-30902

Consolidated details from connected sources confirm CVE-2023-30902 affects Trend Micro Apex One and Apex One as a Service agent, enabling local privilege escalation that could result in deletion of privileged Trend Micro registry keys (including protected keys). Root cause is an elevation-of-priv...

CVE-2023-28929

Trend Micro Security 2021, 2022, and 2023 Consumer are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started...

CVE-2023-28929

CVE-2023-28929 affects Trend Micro Security (consumer editions) 2021–2023. The issue is a DLL hijacking flaw (CWE-427) where loading a malicious DLL via a vulnerable executable may allow arbitrary code execution or execution of a malicious program each time the executable starts. Affected product...

CVE-2023-28929

Trend Micro Security 2021, 2022, and 2023 Consumer are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started...

PT-2023-5336

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One and Apex One as a Service affected versions not specified Description The issue is related to a path traversal vulnerability. This vulnerability could allow an unauthenticated attacker to upload an arbitrary file to the...

Trend Micro Apex One code-related vulnerabilities

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker to elevate privileges...