Apex One

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*

part: a version: * update: *

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductApex One (4a397b89-120c-51f4-9f9b-30a93eedae96)
Edition*
Language*
Software editionon-premises
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49158 vulnerable 2026-06-08 07:29:12.654209 Details available
MEDIUM (6.7)
An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:56.705Z
Updated: 2025-06-17T19:55:43.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49157 vulnerable 2026-06-08 07:29:12.653652 Details available
HIGH (7.8)
A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:49.084Z
Updated: 2025-06-17T20:18:26.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49156 vulnerable 2026-06-08 07:29:12.653105 Details available
HIGH (7)
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:39.613Z
Updated: 2025-06-17T20:21:26.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49155 vulnerable 2026-06-08 07:29:12.652343 Details available
HIGH (8.8)
An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.
Published: 2025-06-17T18:42:31.517Z
Updated: 2025-06-17T20:22:40.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49154 vulnerable 2026-06-08 07:29:12.651901 Details available
HIGH (8.7)
An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:10.085Z
Updated: 2025-06-17T20:25:33.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58105 vulnerable 2026-06-08 06:56:14.230926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58104 vulnerable 2026-06-08 06:56:14.230475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55917 vulnerable 2026-06-08 06:54:17.242010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55632 vulnerable 2026-06-08 06:54:17.148966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55631 vulnerable 2026-06-08 06:54:17.148245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52050 vulnerable 2026-06-08 06:52:14.632899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52049 vulnerable 2026-06-08 06:52:14.632326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52048 vulnerable 2026-06-08 06:52:14.631652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.