Deep Security Agent vulnerabilities
11 known vulnerabilities in Deep Security Agent from Trend Micro. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Trend Micro Deep Security: Improper Link Resolution Before File Access
A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-pr
- 7.8 High severity
Trend Micro Deep Security: Improper Link Resolution Before File Access
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in
- 7.3 High severity
Trend Micro Deep Security: Incorrect Permission Assignment for Critical Resource
An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain t
- 8.8 High severity
Trend Micro Deep Security: Improper Neutralization of Special Elements used in a Command
A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate ac
- 7.8 High severity
Trend Micro Deep Security Agent: Improper Privilege Management
An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target sy
- 7.8 High severity
Trend Micro Deep Security Agent: Insufficient Use of Symbolic Constants
A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code
- 7.8 High severity
Trend Micro Deep Security Agent: Improper Link Resolution Before File Access
A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the
- 7.8 High severity
Trend Micro Deep Security Agent: Improper Privilege Management
An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtai
- 7.8 High severity
Trend Micro Deep Security: Improper Link Resolution Before File Access
A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute
- 7.8 High severity
Trend Micro Deep Security Agent for Linux: Improper Control of Generation of Code
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first
- 7.5 High severity
Trend Micro Deep Security Agent for Linux: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised