Trend Micro Deep Security Agent vulnerabilities

15 CVEs affecting Trend Micro Deep Security Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30642, published 2025-06-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-23119, published 2022-01-20. High severity, CVSS 7.5. EPSS: 22.3% chance of exploitation in the next 30 days. A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file…
CVE-2022-23120, published 2022-01-20. High severity, CVSS 7.8. EPSS: 6.4% chance of exploitation in the next 30 days. A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary…
CVE-2024-51503, published 2024-11-19. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected…
CVE-2024-48903, published 2024-10-22. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first…
CVE-2024-36358, published 2024-06-10. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an…
CVE-2022-40709, published 2022-09-28. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected…
CVE-2023-52338, published 2024-01-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected…
CVE-2023-52337, published 2024-01-23. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on…
CVE-2022-40710, published 2022-09-28. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations.…
CVE-2025-30641, published 2025-06-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please…

Latest

CVE-2025-30642, published 2025-06-17. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations. Please note: an…
CVE-2025-30640, published 2025-06-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain…
CVE-2024-55955, published 2024-12-31. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on…