Trend Micro Maximum Security 2022 vulnerabilities

7 CVEs affecting Trend Micro Maximum Security 2022, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-52521, published 2025-07-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-52521, published 2025-07-10. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro…
CVE-2022-30687, published 2022-05-27. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. Trend Micro Maximum Security 2022 is vulnerable to a link following vulnerability that could allow a low privileged local user to manipulate the product's secure erase feature to delete arbitrary…
CVE-2023-28929, published 2023-06-26. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence…
CVE-2024-32849, published 2024-06-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.
CVE-2022-48191, published 2023-01-20. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and…
CVE-2025-49385, published 2025-06-17. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro…
CVE-2025-49384, published 2025-06-17. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro…