PT-2025-25761 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security version 17.8 Consumer Description: The issue is a link following local privilege escalation vulnerability. It could allow a local attacker to unintentionally delete privileged Trend Micro files, including its own...

Trend Micro Apex One和Trend Micro Worry-Free Business Security Services 访问控制错误漏洞

Trend Micro Apex One and Trend Micro Worry-Free Business Security Services are both products of Trend Micro, Inc.Trend Micro Apex One is an endpoint protection software.Trend Micro Worry -Free Business Security Services is an endpoint security solution. A security vulnerability exists in Trend...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central versions prior to 8.0.6955, which stems from an unrestricted file upload that could result in the upload of arbitrary files...

PT-2025-25746 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Worry-Free Business Security affected versions not specified Description: An insecure access control issue could allow a local attacker to overwrite key memory-mapped files,...

Trend Micro Apex Central 代码问题漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central that stems from the modTMSM component being susceptible to a server-side request forgery attack, which could lead to information disclosure...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from an authentication bypass issue that could result in modification of the product configuration...

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security protection system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link following issue in the anti-malware component that could lead to elevated privileges...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from a post-authentication SQL injection issue that could result in elevated privileges...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from improper deserialization and could lead to pre-authenticated remote code execution...

Trend Micro Worry-Free Business Security Services 代码问题漏洞

Trend Micro Worry-Free Business Security Services is an endpoint security solution from Trend Micro. A security vulnerability exists in Trend Micro Worry-Free Business Security Services that stems from an uncontrolled search path that could lead to the execution of arbitrary code...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from improper deserialization and could lead to pre-authenticated remote code execution...

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link-following issue that could lead to a denial of service...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from improper deserialization and could lead to remote code execution after authentication...

Trend Micro Apex Central 注入漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central versions prior to 8.0.6955 that originates from a local file inclusion and could lead to remote code execution...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from improper deserialization and could lead to pre-authenticated remote code execution...

The vulnerability of the PolicyServerWindowsService class in the PolicyServer server, which is part of Trend Micro Endpoint Encryption (TMEE), allows a perpetrator to execute arbitrary code.

The vulnerability of the PolicyServerWindowsService class in the PolicyServer server, a component of the Trend Micro Endpoint Encryption TMEE data encryption tool, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to...

Trend Micro Maximum Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2025-25441 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security version 17.8 Description: The issue is related to a link following local privilege escalation that could allow a local attacker to unintentionally delete privileged Trend Micro files, including its own. Recommendations: F...

Vulnerabilities fixed in Trend Micro Apex One and Apex Central

Trend Micro has fixed vulnerabilities in Apex One and Apex Central. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code or gain access to sensitive data. Trend Micro has released updates to fix the vulnerabilities. See attached...

PT-2025-25273 · Trend Micro · Trend Micro Worry-Free Business Security Services

Name of the Vulnerable Software and Affected Versions: Trend Micro Worry-Free Business Security Services WFBSS SaaS client version affected versions not specified Description: The issue is related to an uncontrolled search path vulnerability in the WFBSS agent, which could allow an attacker with...