8306 matches found
CVE-2022-27883
A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-crafted file as a symlink that can lead to privilege escalation. Please note that an attacker must at least have low-level privileges on the system to attempt to exploit this...
Get Executives on board with managing Cyber Risk
Learn how the 2025 Trend Micro Defenders Survey Report helps paint a clear picture of how security teams are looking to work with executive leaders to manage cyber risk...
Trend Micro's Pivotal Role in INTERPOL's Operation Sentinel: Dismantling Digital Extortion Networks Across Africa
Continuing a Legacy of Successful Collaboration...
The vulnerability of the GetGroupFilteredUsers function on the PolicyServer server, a feature of Trend Micro Endpoint Encryption (TMEE), allows a malicious actor to increase their privileges.
The vulnerability of the GetGroupFilteredUsers function in the PolicyServer server, a component of the Trend Micro Endpoint Encryption TMEE data encryption solution, is related to the use of a potentially dangerous function. Exploiting this vulnerability could allow an attacker to increase their...
The vulnerability of the ProcessWhereClause function in the PolicyServer server of Trend Micro Endpoint Encryption (TMEE) allows attackers to increase their privileges.
The vulnerability of the ProcessWhereClause function in the PolicyServer server, a component of Trend Micro Endpoint Encryption TMEE encryption software, relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability can allow an attacker to enhance thei...
The software for cleaning and optimizing the Trend Micro Cleaner One Pro system is vulnerable due to errors in processing files with the .LNK extension. This vulnerability allows attackers to increase their privileges and gain access to delete files.
The vulnerability of the software for cleaning and optimizing the Trend Micro Cleaner One Pro system is related to errors in processing files with the extension .LNK locals. Exploiting this vulnerability can allow an attacker to increase their privileges and gain access to delete files...
The vulnerability of Trend Micro Password Manager lies in its improper handling of links before accessing a file. This allows attackers to escalate their privileges.
The vulnerability of the Trend Micro Password Manager lies in the improper handling of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...
gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...
What Does it Take to Manage Cloud Risk?
Learn why hybrid and multi-cloud environments are vital for IT and business success from our 2025 Trend Micro Defenders Survey...
What Cyber Defenders Really Think About AI Risk
Learn how Trend Micro's 2025 Trend Micro Defenders Survey Report highlights current AI-related cybersecurity priorities and where security professionals use AI to their advantage...
Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Junk...
SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics
In November, a targeted spear-phishing campaign was observed using Trend Micro-themed lures against various industries, but this was quickly detected and thwarted by the Trend Vision One™ platform...
gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...
gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...
gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...
The vulnerability of the DbAppDomain function on the PolicyServer server, a feature of Trend Micro Endpoint Encryption (TMEE), allows a malicious actor to circumvent security restrictions.
The vulnerability of the DbAppDomain function on the PolicyServer server, a component of the Trend Micro Endpoint Encryption TMEE data encryption solution, is related to the use of outdated functions. Exploiting this vulnerability could allow an attacker operating remotely to circumvent security...
The vulnerability of the ValidateToken function in the PolicyServer server, a component of Trend Micro Endpoint Encryption (TMEE), allows a perpetrator to execute arbitrary code.
The vulnerability of the ValidateToken function in the PolicyServer server, a component of the Trend Micro Endpoint Encryption TMEE data encryption tool, is related to the use of outdated functions. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
About Remote Code Execution – Windows LNK File (CVE-2025-9491) vulnerability
About Remote Code Execution - Windows LNK File CVE-2025-9491 vulnerability. A vulnerability in the Microsoft Windows shortcut .LNK handling mechanism allows malicious command-line arguments to be hidden in the Target field using whitespace characters, making them invisible to standard tools...
The vulnerability of the Regain Disk Space function in the Trend Micro Maximum Security antivirus software affects Windows operating systems. This vulnerability allows attackers to bypass security restrictions, gain elevated privileges, and execute arbitrary code.
The vulnerability of the Regain Disk Space function in the Trend Micro Maximum Security antivirus software for Windows operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow attackers to circumvent security restrictions...
