Trend Micro Antivirus vulnerabilities

3 CVEs affecting Trend Micro Antivirus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5545, published 2008-12-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-5545, published 2008-12-12. High severity, CVSS 9.3. EPSS: 3% chance of exploitation in the next 30 days. Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka…
CVE-2007-1591, published 2007-03-22. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to cause a denial of service (kernel fault and system crash) via a crafted UPX…
CVE-2007-0856, published 2007-02-08. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007,…