[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVOCARlltXyRTF7oAzJ92-7YXUWzIMz8jqKmIzvRv3EE":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":418,"kevVulnerabilities":471,"topProductsByCves":553,"seoMetadata":564,"meta":573},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":417},32496,"trendmicro",107,539,11,313,"2025-08-05","t",[16,22,28,34,40,46,51,57,63,68,73,78,83,87,91,95,99,103,107,111,115,119,122,126,130,133,136,140,143,147,150,153,156,160,163,166,170,173,177,180,184,188,191,195,199,203,206,209,212,216,219,222,226,229,232,235,239,243,247,251,256,259,262,265,268,272,276,280,284,287,291,295,298,301,305,309,312,315,319,322,325,329,333,336,340,343,346,349,352,356,359,362,365,368,372,375,378,381,384,388,392,396,400,404,408,411,414],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},165170,"apex_one",7,154,10,{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":25,"last_cve_update":27},165215,"officescan",6,71,"2021-08-04",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":31,"last_cve_update":33},165254,"worry-free_business_security",5,57,"2023-09-19",{"id":35,"product_name":36,"version_count":37,"cve_count":38,"kev_count":37,"last_cve_update":39},165169,"apex_central",1,32,"2025-06-17",{"id":41,"product_name":42,"version_count":25,"cve_count":43,"kev_count":44,"last_cve_update":45},165206,"interscan_web_security_virtual_appliance",29,0,"2024-06-10",{"id":47,"product_name":48,"version_count":37,"cve_count":49,"kev_count":37,"last_cve_update":50},165255,"worry-free_business_security_services",25,"2025-07-10",{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":44,"last_cve_update":56},165177,"control_manager",2,22,"2021-03-03",{"id":58,"product_name":59,"version_count":60,"cve_count":61,"kev_count":44,"last_cve_update":62},165214,"mobile_security",3,21,"2024-01-23",{"id":64,"product_name":65,"version_count":37,"cve_count":66,"kev_count":44,"last_cve_update":67},165187,"email_encryption_gateway",19,"2018-05-23",{"id":69,"product_name":70,"version_count":60,"cve_count":71,"kev_count":44,"last_cve_update":72},165239,"serverprotect",18,"2022-02-24",{"id":74,"product_name":75,"version_count":11,"cve_count":76,"kev_count":44,"last_cve_update":77},165196,"internet_security",17,"2024-01-29",{"id":79,"product_name":80,"version_count":81,"cve_count":82,"kev_count":44,"last_cve_update":50},165222,"password_manager",20,15,{"id":84,"product_name":85,"version_count":31,"cve_count":86,"kev_count":44,"last_cve_update":39},165183,"deep_security_agent",14,{"id":88,"product_name":89,"version_count":25,"cve_count":90,"kev_count":44,"last_cve_update":77},165226,"premium_security",13,{"id":92,"product_name":93,"version_count":94,"cve_count":90,"kev_count":44,"last_cve_update":56},165204,"interscan_messaging_security_virtual_appliance",4,{"id":96,"product_name":97,"version_count":98,"cve_count":90,"kev_count":44,"last_cve_update":77},165207,"maximum_security",8,{"id":100,"product_name":101,"version_count":25,"cve_count":90,"kev_count":44,"last_cve_update":102},165243,"smart_protection_server","2018-05-25",{"id":104,"product_name":105,"version_count":11,"cve_count":106,"kev_count":44,"last_cve_update":72},165151,"antivirus",12,{"id":108,"product_name":109,"version_count":98,"cve_count":106,"kev_count":44,"last_cve_update":110},165209,"maximum_security_2020","2021-09-06",{"id":112,"product_name":113,"version_count":37,"cve_count":106,"kev_count":44,"last_cve_update":114},165244,"threat_discovery_appliance","2017-04-28",{"id":116,"product_name":117,"version_count":98,"cve_count":11,"kev_count":44,"last_cve_update":118},165228,"premium_security_2020","2021-02-10",{"id":120,"product_name":121,"version_count":98,"cve_count":11,"kev_count":44,"last_cve_update":118},165199,"internet_security_2020",{"id":123,"product_name":124,"version_count":37,"cve_count":125,"kev_count":44,"last_cve_update":39},165247,"trend_micro_endpoint_encryption",9,{"id":127,"product_name":128,"version_count":54,"cve_count":125,"kev_count":44,"last_cve_update":129},165193,"housecall","2022-09-19",{"id":131,"product_name":132,"version_count":60,"cve_count":98,"kev_count":44,"last_cve_update":110},165208,"maximum_security_2019",{"id":134,"product_name":135,"version_count":31,"cve_count":98,"kev_count":44,"last_cve_update":129},165237,"security",{"id":137,"product_name":138,"version_count":37,"cve_count":98,"kev_count":44,"last_cve_update":139},165246,"trend_micro_antivirus","2012-03-21",{"id":141,"product_name":142,"version_count":25,"cve_count":19,"kev_count":44,"last_cve_update":62},165182,"deep_security",{"id":144,"product_name":145,"version_count":60,"cve_count":19,"kev_count":44,"last_cve_update":146},165198,"internet_security_2019","2020-09-24",{"id":148,"product_name":149,"version_count":60,"cve_count":19,"kev_count":44,"last_cve_update":146},165227,"premium_security_2019",{"id":151,"product_name":152,"version_count":54,"cve_count":25,"kev_count":44,"last_cve_update":56},165235,"scanmail",{"id":154,"product_name":155,"version_count":54,"cve_count":25,"kev_count":44,"last_cve_update":50},165211,"maximum_security_2022",{"id":157,"product_name":158,"version_count":98,"cve_count":25,"kev_count":44,"last_cve_update":159},165181,"deep_discovery_inspector","2024-10-22",{"id":161,"product_name":162,"version_count":94,"cve_count":25,"kev_count":44,"last_cve_update":77},165161,"antivirus_\\+_security",{"id":164,"product_name":165,"version_count":60,"cve_count":25,"kev_count":44,"last_cve_update":118},165163,"antivirus\\+_security_2020",{"id":167,"product_name":168,"version_count":94,"cve_count":25,"kev_count":44,"last_cve_update":169},165194,"housecall_for_home_networks","2021-09-29",{"id":171,"product_name":172,"version_count":60,"cve_count":25,"kev_count":44,"last_cve_update":102},165152,"antivirus\\+",{"id":174,"product_name":175,"version_count":54,"cve_count":31,"kev_count":44,"last_cve_update":176},165157,"antivirus_for_mac_2018","2018-10-23",{"id":178,"product_name":179,"version_count":54,"cve_count":31,"kev_count":44,"last_cve_update":176},165158,"antivirus_for_mac_2019",{"id":181,"product_name":182,"version_count":60,"cve_count":31,"kev_count":44,"last_cve_update":183},165162,"antivirus_\\+_security_2019","2020-02-20",{"id":185,"product_name":186,"version_count":54,"cve_count":31,"kev_count":44,"last_cve_update":187},165192,"home_network_security","2021-05-27",{"id":189,"product_name":190,"version_count":54,"cve_count":31,"kev_count":44,"last_cve_update":176},165156,"antivirus_for_mac_2017",{"id":192,"product_name":193,"version_count":54,"cve_count":31,"kev_count":44,"last_cve_update":194},165210,"maximum_security_2021","2023-06-26",{"id":196,"product_name":197,"version_count":44,"cve_count":31,"kev_count":44,"last_cve_update":198},165249,"trend_vision_one","2025-04-02",{"id":200,"product_name":201,"version_count":37,"cve_count":31,"kev_count":44,"last_cve_update":202},165253,"vulnerability_protection","2020-08-27",{"id":204,"product_name":205,"version_count":37,"cve_count":94,"kev_count":44,"last_cve_update":72},165242,"serverprotect_for_storage",{"id":207,"product_name":208,"version_count":54,"cve_count":94,"kev_count":44,"last_cve_update":146},165218,"officescan_cloud",{"id":210,"product_name":211,"version_count":94,"cve_count":94,"kev_count":44,"last_cve_update":202},165185,"deep_security_manager",{"id":213,"product_name":214,"version_count":60,"cve_count":60,"kev_count":54,"last_cve_update":215},165216,"officescan_business_security","2021-07-29",{"id":217,"product_name":218,"version_count":37,"cve_count":60,"kev_count":44,"last_cve_update":194},165229,"premium_security_2021",{"id":220,"product_name":221,"version_count":37,"cve_count":60,"kev_count":44,"last_cve_update":72},165240,"serverprotect_for_network_appliance_filer",{"id":223,"product_name":224,"version_count":25,"cve_count":60,"kev_count":44,"last_cve_update":225},165179,"deep_discovery_director","2017-08-01",{"id":227,"product_name":228,"version_count":37,"cve_count":60,"kev_count":44,"last_cve_update":183},165190,"endpoint_sensor",{"id":230,"product_name":231,"version_count":37,"cve_count":60,"kev_count":44,"last_cve_update":194},165200,"internet_security_2021",{"id":233,"product_name":234,"version_count":37,"cve_count":60,"kev_count":44,"last_cve_update":194},165165,"antivirus\\+_security_2021",{"id":236,"product_name":237,"version_count":54,"cve_count":60,"kev_count":44,"last_cve_update":238},165203,"interscan_messaging_security_suite","2012-09-17",{"id":240,"product_name":241,"version_count":31,"cve_count":60,"kev_count":44,"last_cve_update":242},165154,"antivirus\\+_2020","2020-09-29",{"id":244,"product_name":245,"version_count":54,"cve_count":54,"kev_count":44,"last_cve_update":246},165164,"antivirus_\\+_security_2020","2020-01-18",{"id":248,"product_name":249,"version_count":54,"cve_count":54,"kev_count":44,"last_cve_update":250},165195,"im_security","2021-05-10",{"id":252,"product_name":253,"version_count":254,"cve_count":54,"kev_count":44,"last_cve_update":255},165186,"dr._safety",34,"2019-02-05",{"id":257,"product_name":258,"version_count":90,"cve_count":54,"kev_count":44,"last_cve_update":56},165180,"deep_discovery_email_inspector",{"id":260,"product_name":261,"version_count":54,"cve_count":54,"kev_count":44,"last_cve_update":56},165234,"safe_lock",{"id":263,"product_name":264,"version_count":44,"cve_count":54,"kev_count":44,"last_cve_update":159},165159,"antivirus_one",{"id":266,"product_name":267,"version_count":37,"cve_count":54,"kev_count":44,"last_cve_update":146},165153,"antivirus\\+_2019",{"id":269,"product_name":270,"version_count":37,"cve_count":54,"kev_count":44,"last_cve_update":271},165150,"anti-threat_toolkit","2020-01-30",{"id":273,"product_name":274,"version_count":54,"cve_count":54,"kev_count":44,"last_cve_update":275},165223,"portable_security","2022-03-08",{"id":277,"product_name":278,"version_count":37,"cve_count":54,"kev_count":44,"last_cve_update":279},165220,"officescan_xg","2018-08-30",{"id":281,"product_name":282,"version_count":54,"cve_count":54,"kev_count":44,"last_cve_update":283},165205,"interscan_web_security_suite","2009-02-17",{"id":285,"product_name":286,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":194},165202,"internet_security_2023",{"id":288,"product_name":289,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":290},165155,"antivirus_for_mac","2022-04-09",{"id":292,"product_name":293,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":294},165160,"antivirus\\+_security","2021-12-03",{"id":296,"product_name":297,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":194},165166,"antivirus\\+_security_2022",{"id":299,"product_name":300,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":194},165167,"antivirus\\+_security_2023",{"id":302,"product_name":303,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":304},165168,"antivirus_toolkit","2020-08-05",{"id":306,"product_name":307,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":308},165171,"apex_one_as_a_service","2019-04-05",{"id":310,"product_name":311,"version_count":60,"cve_count":37,"kev_count":44,"last_cve_update":308},165172,"business_security",{"id":313,"product_name":314,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":50},165173,"cleaner_one",{"id":316,"product_name":317,"version_count":54,"cve_count":37,"kev_count":44,"last_cve_update":318},165174,"client_server_messaging_suite","2008-08-27",{"id":320,"product_name":321,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":56},165175,"cloud_edge",{"id":323,"product_name":324,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":56},165178,"deep_discovery_analyzer",{"id":326,"product_name":327,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":328},165184,"deep_security_as_a_service","2019-12-16",{"id":330,"product_name":331,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":332},165188,"encryption_for_email","2017-12-16",{"id":334,"product_name":335,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":67},165189,"endpoint_application_control",{"id":337,"product_name":338,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":339},165197,"internet_security_2010","2012-08-25",{"id":341,"product_name":342,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":194},165201,"internet_security_2022",{"id":344,"product_name":345,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":77},165149,"air_support",{"id":347,"product_name":348,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":194},165212,"maximum_security_2023",{"id":350,"product_name":351,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":304},165217,"officescan_business_security_service",{"id":353,"product_name":354,"version_count":54,"cve_count":37,"kev_count":44,"last_cve_update":355},165219,"officescan_monthly","2018-07-06",{"id":357,"product_name":358,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":304},165221,"online_scan",{"id":360,"product_name":361,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":56},165224,"portal_protect",{"id":363,"product_name":364,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":194},165230,"premium_security_2022",{"id":366,"product_name":367,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":194},165231,"premium_security_2023",{"id":369,"product_name":370,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":371},165232,"ransom_buster","2019-08-21",{"id":373,"product_name":374,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":304},165233,"rootkit_buster",{"id":376,"product_name":377,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":56},165236,"scanmail_for_ibm_domino",{"id":379,"product_name":380,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":110},165238,"security_for_best_buy",{"id":382,"product_name":383,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":56},165241,"serverprotect_for_network_appliance_filers",{"id":385,"product_name":386,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":387},165245,"tmeext.sys","2015-02-06",{"id":389,"product_name":390,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":391},165248,"trend_micro_internet_security","2011-05-20",{"id":393,"product_name":394,"version_count":54,"cve_count":37,"kev_count":44,"last_cve_update":395},165250,"txone_stellarone","2023-03-22",{"id":397,"product_name":398,"version_count":37,"cve_count":37,"kev_count":44,"last_cve_update":399},165251,"virtual_mobile_infrastructure","2017-01-30",{"id":401,"product_name":402,"version_count":44,"cve_count":37,"kev_count":44,"last_cve_update":403},165252,"vpn_proxy_one_pro","2022-07-30",{"id":405,"product_name":406,"version_count":37,"cve_count":44,"kev_count":44,"last_cve_update":407},165176,"common_cgi",null,{"id":409,"product_name":410,"version_count":37,"cve_count":44,"kev_count":44,"last_cve_update":407},165225,"portalprotect",{"id":412,"product_name":413,"version_count":37,"cve_count":44,"kev_count":44,"last_cve_update":407},165213,"micro_security_2019",{"id":415,"product_name":416,"version_count":54,"cve_count":44,"kev_count":44,"last_cve_update":407},165191,"hijackthis","Trendmicro is a technology vendor with 107 tracked products and 539 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[419,427,431,435,439,443,451,455,459,463],{"cveId":420,"description":421,"publishedDate":139,"cvssScore":422,"cvssVersion":423,"severity":424,"isKev":425,"epssScore":426},"CVE-2012-1456","The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.",4.3,"v2","Medium",false,0.99934,{"cveId":428,"description":429,"publishedDate":139,"cvssScore":422,"cvssVersion":423,"severity":424,"isKev":425,"epssScore":430},"CVE-2012-1459","The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.",0.99814,{"cveId":432,"description":433,"publishedDate":139,"cvssScore":422,"cvssVersion":423,"severity":424,"isKev":425,"epssScore":434},"CVE-2012-1443","The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.",0.99636,{"cveId":436,"description":437,"publishedDate":139,"cvssScore":422,"cvssVersion":423,"severity":424,"isKev":425,"epssScore":438},"CVE-2012-1457","The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.",0.98331,{"cveId":440,"description":441,"publishedDate":139,"cvssScore":422,"cvssVersion":423,"severity":424,"isKev":425,"epssScore":442},"CVE-2012-1453","The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.",0.9771,{"cveId":444,"description":445,"publishedDate":446,"cvssScore":447,"cvssVersion":448,"severity":449,"isKev":425,"epssScore":450},"CVE-2016-7552","On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.","2017-04-12",9.8,"v3.0","Critical",0.93249,{"cveId":452,"description":453,"publishedDate":139,"cvssScore":422,"cvssVersion":423,"severity":424,"isKev":425,"epssScore":454},"CVE-2012-1425","The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \\50\\4B\\03\\04 character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.",0.93199,{"cveId":456,"description":457,"publishedDate":446,"cvssScore":447,"cvssVersion":448,"severity":449,"isKev":425,"epssScore":458},"CVE-2016-7547","A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.",0.92721,{"cveId":460,"description":461,"publishedDate":139,"cvssScore":422,"cvssVersion":423,"severity":424,"isKev":425,"epssScore":462},"CVE-2012-1461","The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with multiple compressed streams.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations.",0.91709,{"cveId":464,"description":465,"publishedDate":466,"cvssScore":467,"cvssVersion":468,"severity":469,"isKev":425,"epssScore":470},"CVE-2020-8604","A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations.","2020-05-27",7.5,"v3.1","High",0.89772,[472,481,490,498,506,514,521,527,533,539,546],{"cveId":473,"description":474,"publishedDate":13,"cvssScore":475,"cvssVersion":468,"severity":449,"isKev":4,"epssScore":476,"cisaVulnName":477,"cisaDateAdded":478,"cisaShortDescription":479,"cisaRequiredAction":480},"CVE-2025-54948","A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.",9.4,0.23919,"Trend Micro Apex One OS Command Injection Vulnerability","2025-08-18","Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":482,"description":483,"publishedDate":33,"cvssScore":484,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":485,"cisaVulnName":486,"cisaDateAdded":487,"cisaShortDescription":488,"cisaRequiredAction":489},"CVE-2023-41179","A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.",7.2,0.04251,"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","2023-09-21","Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":491,"description":492,"publishedDate":129,"cvssScore":484,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":493,"cisaVulnName":494,"cisaDateAdded":495,"cisaShortDescription":496,"cisaRequiredAction":497},"CVE-2022-40139","Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.",0.03291,"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","2022-09-15","Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.","Apply updates per vendor instructions.",{"cveId":499,"description":500,"publishedDate":501,"cvssScore":447,"cvssVersion":468,"severity":449,"isKev":4,"epssScore":502,"cisaVulnName":503,"cisaDateAdded":504,"cisaShortDescription":505,"cisaRequiredAction":497},"CVE-2022-26871","An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.","2022-03-29",0.19481,"Trend Micro Apex Central Arbitrary File Upload Vulnerability","2022-03-31","An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.",{"cveId":507,"description":508,"publishedDate":509,"cvssScore":447,"cvssVersion":468,"severity":449,"isKev":4,"epssScore":510,"cisaVulnName":511,"cisaDateAdded":512,"cisaShortDescription":513,"cisaRequiredAction":497},"CVE-2020-8599","Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.","2020-03-18",0.11858,"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","2021-11-03","Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login.",{"cveId":515,"description":516,"publishedDate":215,"cvssScore":517,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":518,"cisaVulnName":519,"cisaDateAdded":512,"cisaShortDescription":520,"cisaRequiredAction":497},"CVE-2021-36741","An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.",8.8,0.04951,"Trend Micro Multiple Products Improper Input Validation Vulnerability","Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.",{"cveId":522,"description":523,"publishedDate":509,"cvssScore":517,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":524,"cisaVulnName":525,"cisaDateAdded":512,"cisaShortDescription":526,"cisaRequiredAction":497},"CVE-2020-8467","A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.",0.109,"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.",{"cveId":528,"description":529,"publishedDate":509,"cvssScore":517,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":530,"cisaVulnName":531,"cisaDateAdded":512,"cisaShortDescription":532,"cisaRequiredAction":497},"CVE-2020-8468","Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.",0.06165,"Trend Micro Multiple Products Content Validation Escape Vulnerability","Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.",{"cveId":534,"description":535,"publishedDate":215,"cvssScore":536,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":537,"cisaVulnName":519,"cisaDateAdded":512,"cisaShortDescription":538,"cisaRequiredAction":497},"CVE-2021-36742","A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",7.8,0.01482,"Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.",{"cveId":540,"description":541,"publishedDate":542,"cvssScore":536,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":543,"cisaVulnName":544,"cisaDateAdded":512,"cisaShortDescription":545,"cisaRequiredAction":497},"CVE-2020-24557","A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.","2020-09-01",0.02666,"Trend Micro Multiple Products Improper Access Control Vulnerability","Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.",{"cveId":547,"description":548,"publishedDate":549,"cvssScore":467,"cvssVersion":468,"severity":469,"isKev":4,"epssScore":550,"cisaVulnName":551,"cisaDateAdded":512,"cisaShortDescription":552,"cisaRequiredAction":497},"CVE-2019-18187","Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.","2019-10-28",0.25125,"Trend Micro OfficeScan Directory Traversal Vulnerability","Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.",[554,555,556,557,558,559,560,561,562,563],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":25,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":31,"last_cve_update":33},{"id":35,"product_name":36,"version_count":37,"cve_count":38,"kev_count":37,"last_cve_update":39},{"id":41,"product_name":42,"version_count":25,"cve_count":43,"kev_count":44,"last_cve_update":45},{"id":47,"product_name":48,"version_count":37,"cve_count":49,"kev_count":37,"last_cve_update":50},{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":44,"last_cve_update":56},{"id":58,"product_name":59,"version_count":60,"cve_count":61,"kev_count":44,"last_cve_update":62},{"id":64,"product_name":65,"version_count":37,"cve_count":66,"kev_count":44,"last_cve_update":67},{"id":69,"product_name":70,"version_count":60,"cve_count":71,"kev_count":44,"last_cve_update":72},{"title":565,"metaDescription":566,"keywords":567,"structuredData":568},"Trendmicro - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Trendmicro covering 107 products with 539 tracked vulnerabilities including 3 critical and 8 high-severity issues and 11 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Trendmicro vulnerabilities, Trendmicro security, Trendmicro CVE, Trendmicro threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Trendmicro KEV, Trendmicro exploited vulnerabilities",{"@context":569,"@type":570,"name":571,"description":566,"url":572},"https:\u002F\u002Fschema.org","Organization","Trendmicro","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrendmicro",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":574,"apiVersion":575},"2026-10-17T00:02:48.859Z","3.0"]