Trend Micro Maximum Security 2021 vulnerabilities

5 CVEs affecting Trend Micro Maximum Security 2021, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28929, published 2023-06-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-25251, published 2021-02-10. High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days. The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and…
CVE-2021-36744, published 2021-09-06. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of…
CVE-2021-44023, published 2021-12-16. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to…
CVE-2023-28929, published 2023-06-26. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence…
CVE-2021-32460, published 2021-06-03. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a…