20.0

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-23	CVE-2023-52337	Unspecified vulnerability in Trendmicro Deep Security and Deep Security Agent An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. local low complexity trendmicro	7.8
2024-01-23	CVE-2023-52338	Link Following vulnerability in Trendmicro Deep Security and Deep Security Agent A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. local low complexity trendmicro CWE-59	7.8
2021-03-03	CVE-2021-25252	Resource Exhaustion vulnerability in Trendmicro products Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file. local low complexity trendmicro CWE-400	4.9