CVE-2021-25224: Trend Micro Serverprotect

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

• Trend Micro Serverprotect: version 3.0 only

Published 2021-01-27. Last modified 2026-06-17.