CVE-2025-69259

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability...

CVE-2025-69259

Trend Micro Apex Central is affected by CVE-2025-69259, a remote-unauthenticated vulnerability characterized as a message unchecked NULL return value that can cause a denial-of-service. Connected sources (JVNDB, RH, NCSC, CNNVD) confirm a multi-vulnerability context for Trend Micro Apex Central a...

CVE-2025-69258

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations...

CVE-2025-69258

Trend Micro Apex Central is affected by CVE-2025-69258 (LoadLibraryEX). The vulnerability allows an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to code execution under the SYSTEM context on affected installations. Current public details indica...

CVE-2025-69260: Origin Validation Error

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability...

CVE-2025-69258: Authentication Bypass by Spoofing

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations...

CVE-2025-69259: Origin Validation Error

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central, which stems from a LoadLibraryEX vulnerability that could lead to the execution of arbitrary code by an unauthenticated, remote attacker...

PT-2026-1936

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central versions prior to 7190 Description A LoadLibraryEX vulnerability exists in Trend Micro Apex Central that could allow an unauthenticated remote attacker to load a malicious Dynamic Link Library DLL into a key executable...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro. A security vulnerability exists in Trend Micro Apex Central that originates from an out-of-bounds read and could lead to a denial of service attack...

PT-2026-1937

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central affected versions not specified Description A flaw exists in Trend Micro Apex Central that could allow a remote attacker to cause a denial-of-service condition. Authentication is not required to exploit this issue. The...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro. A security vulnerability exists in Trend Micro Apex Central that stems from an unchecked NULL return value that could lead to a denial of service attack...

CVE-2022-27883

A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-crafted file as a symlink that can lead to privilege escalation. Please note that an attacker must at least have low-level privileges on the system to attempt to exploit this...

Get Executives on board with managing Cyber Risk

Learn how the 2025 Trend Micro Defenders Survey Report helps paint a clear picture of how security teams are looking to work with executive leaders to manage cyber risk...

Trend Micro's Pivotal Role in INTERPOL's Operation Sentinel: Dismantling Digital Extortion Networks Across Africa

Continuing a Legacy of Successful Collaboration...

The vulnerability of the ProcessWhereClause function in the PolicyServer server of Trend Micro Endpoint Encryption (TMEE) allows attackers to increase their privileges.

The vulnerability of the ProcessWhereClause function in the PolicyServer server, a component of Trend Micro Endpoint Encryption TMEE encryption software, relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability can allow an attacker to enhance thei...

The vulnerability of the GetGroupFilteredUsers function on the PolicyServer server, a feature of Trend Micro Endpoint Encryption (TMEE), allows a malicious actor to increase their privileges.

The vulnerability of the GetGroupFilteredUsers function in the PolicyServer server, a component of the Trend Micro Endpoint Encryption TMEE data encryption solution, is related to the use of a potentially dangerous function. Exploiting this vulnerability could allow an attacker to increase their...

The vulnerability of Trend Micro Password Manager lies in its improper handling of links before accessing a file. This allows attackers to escalate their privileges.

The vulnerability of the Trend Micro Password Manager lies in the improper handling of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...

The software for cleaning and optimizing the Trend Micro Cleaner One Pro system is vulnerable due to errors in processing files with the .LNK extension. This vulnerability allows attackers to increase their privileges and gain access to delete files.

The vulnerability of the software for cleaning and optimizing the Trend Micro Cleaner One Pro system is related to errors in processing files with the extension .LNK locals. Exploiting this vulnerability can allow an attacker to increase their privileges and gain access to delete files...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...