CVE-2016-3664: Trend Micro Mobile Security

High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application login server, which allows man-in-the-middle attackers to spoof this server and obtain sensitive information via a crafted certificate.

Affected products

• Trend Micro Mobile Security: up to and including 3.1

Published 2016-05-23. Last modified 2026-06-17.