CVE-2021-25251: Trend Micro Antivirus+ Security 2020

High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days.

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

Affected products

• Trend Micro Antivirus+ Security 2020: version 16.0 only
• Trend Micro Antivirus+ Security 2021: version 17.0 only
• Trend Micro Internet Security 2020: version 16.0 only
• Trend Micro Internet Security 2021: version 17.0 only
• Trend Micro Maximum Security 2020: version 16.0 only
• Trend Micro Maximum Security 2021: version 17.0 only
• Trend Micro Premium Security 2020: version 16.0 only
• Trend Micro Premium Security 2021: version 17.0 only

Published 2021-02-10. Last modified 2026-06-17.