Approved changes feed: RSS · Atom

cpe:2.3:a:trend_micro:trend_micro_deep_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrend Micro (6c9d6123-4a91-55d6-a111-4d33b7deab1d)
ProductTrend Micro Deep Security (b85bdbad-4ce3-56c5-9c0a-038c72e6b990)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40710 vulnerable 2026-06-08 05:48:27.989963 Details available
A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2022-09-28T21:10:25.000Z
Updated: 2024-08-03T12:21:46.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40709 vulnerable 2026-06-08 05:48:27.987997 Details available
An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707 and 40708.
Published: 2022-09-28T21:10:24.000Z
Updated: 2024-11-20T14:56:09.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40708 vulnerable 2026-06-08 05:48:27.985576 Details available
An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.
Published: 2022-09-28T21:10:23.000Z
Updated: 2025-05-20T20:27:37.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40707 vulnerable 2026-06-08 05:48:27.963578 Details available
An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40708.
Published: 2022-09-28T21:10:22.000Z
Updated: 2024-08-03T12:21:46.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8607 vulnerable 2026-06-08 05:27:17.012216 Details available
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
Published: 2020-08-05T14:05:23.000Z
Updated: 2024-08-04T10:03:46.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8602 vulnerable 2026-06-08 05:27:17.002320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15601 vulnerable 2026-06-08 05:19:26.213619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9488 vulnerable 2026-06-08 05:14:25.315285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.