https://cvebrief.com/archive/cves/vendor/trend-micro/ High and critical Trend Micro vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Sat, 23 May 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2025-71215/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71215 Sat, 23 May 2026 12:00:00 GMT A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-71210/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71210 Fri, 22 May 2026 12:00:00 GMT A vulnerability in the Trend Micro Apex One management console allows remote attackers to upload malicious code and execute commands on affected systems. Fix documented: 14.0.0.14136 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-71211/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71211 Fri, 22 May 2026 12:00:00 GMT A secondary vulnerability in the Trend Micro Apex One management console allows remote attackers to upload malicious code and execute commands. Fix documented: 14.0.0.14136 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-71212/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71212 Fri, 22 May 2026 12:00:00 GMT A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.14136 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-71213/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71213 Fri, 22 May 2026 12:00:00 GMT An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.14136 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-71214/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71214 Fri, 22 May 2026 12:00:00 GMT An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-71216/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71216 Fri, 22 May 2026 12:00:00 GMT A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-71217/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-71217 Fri, 22 May 2026 12:00:00 GMT An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34926/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-34926 Fri, 22 May 2026 12:00:00 GMT Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability - Active in CISA KEV catalog. Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34927/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-34927 Fri, 22 May 2026 12:00:00 GMT An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34928/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-34928 Fri, 22 May 2026 12:00:00 GMT An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34929/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-34929 Fri, 22 May 2026 12:00:00 GMT An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34930/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-34930 Fri, 22 May 2026 12:00:00 GMT An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-45206/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-45206 Fri, 22 May 2026 12:00:00 GMT An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-45207/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-45207 Fri, 22 May 2026 12:00:00 GMT An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-45208/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2026-45208 Fri, 22 May 2026 12:00:00 GMT A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Fix documented: 14.0.0.17079 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-69258/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-69258 Fri, 09 Jan 2026 12:00:00 GMT A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-69259/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-69259 Fri, 09 Jan 2026 12:00:00 GMT A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-69260/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-69260 Fri, 09 Jan 2026 12:00:00 GMT A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-54948/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-54948 Tue, 05 Aug 2025 12:00:00 GMT A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. Fix documented: 14.0.0.14039 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-54987/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-54987 Tue, 05 Aug 2025 12:00:00 GMT A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. Fix documented: 14.0.0.14039 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-52521/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-52521 Fri, 11 Jul 2025 12:00:00 GMT Trend Micro Security 17 Fix documented: 17.8.1476 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-52837/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-52837 Fri, 11 Jul 2025 12:00:00 GMT Trend Micro Password Manager (Consumer) version 5 Fix documented: 5.8.0.1327 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-53378/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-53378 Fri, 11 Jul 2025 12:00:00 GMT A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-53503/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-trend-micro-CVE-2025-53503 Fri, 11 Jul 2025 12:00:00 GMT Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own Fix documented: 6.8.323 (CVE record). Independent analyst report on CVE Brief.