CVE-2021-25252: Trend Micro Apex Central

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.

Affected products

• Trend Micro Apex Central: version 2019 only
• Trend Micro Apex One: version 2019 only; affected versions not specified
• Trend Micro Cloud Edge: version 5.0 only
• Trend Micro Control Manager: version 7.0 only
• Trend Micro Deep Discovery Analyzer: version 5.1 only
• Trend Micro Deep Discovery Email Inspector: version 2.5 only
• Trend Micro Deep Discovery Inspector: version 3.8 only
• Trend Micro Deep Security: version 10.0 only; version 11.0 only; version 12.0 only; version 20.0 only
• Trend Micro Interscan Messaging Security Virtual Appliance: version 9.1 only
• Trend Micro Interscan Web Security Virtual Appliance: version 6.5 only
• Trend Micro OfficeScan: affected versions not specified
• Trend Micro Portal Protect: version 2.6 only
• Trend Micro Safe Lock: version 1.1 only
• Trend Micro Scanmail: version 14.0 only
• Trend Micro Scanmail For IBM Domino: version 5.8 only
• Trend Micro Serverprotect: version 5.8 only
• Trend Micro Serverprotect For Network Appliance Filers: version 5.8 only
• Trend Micro Serverprotect For Storage: version 6.0 only
• Trend Micro Worry-Free Business Security: version 10.1 only

Published 2021-03-03. Last modified 2026-06-17.