mobile security vulnerabilities and fixes

Recent CVEs affecting mobile security, with upgrade or downgrade steps. 24 tracked.

Also searched as: mobilesecurity.

mobile security has 24 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-01-23. Highest priority: CVE-2023-32521 (score 67/100).

• CVE-2023-41178 MEDIUM 6.1 DOWNGRADE Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow a
• CVE-2023-41177 MEDIUM 6.1 DOWNGRADE Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow a
• CVE-2023-41176 MEDIUM 6.1 DOWNGRADE Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow a
• CVE-2023-35695 HIGH 7.5 DOWNGRADE A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to downlo
• CVE-2023-32528 HIGH 8.8 DOWNGRADE Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote atta
• CVE-2023-32527 HIGH 8.8 DOWNGRADE Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote atta
• CVE-2023-32526 MEDIUM 6.5 DOWNGRADE Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote att
• CVE-2023-32525 MEDIUM 6.5 DOWNGRADE Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote att
• CVE-2023-32524 HIGH 8.8 DOWNGRADE Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a
• CVE-2023-32523 HIGH 8.8 DOWNGRADE Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a
• CVE-2023-32522 HIGH 8.1 DOWNGRADE A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allo
• CVE-2023-32521 CRITICAL 9.1 DOWNGRADE A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which co
• CVE-2022-40980 CRITICAL 9.1 DOWNGRADE A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 co
• CVE-2020-9264 MEDIUM 5.5 UPGRADE UPGRADE ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Fi
• CVE-2020-10193 HIGH 7.5 UPGRADE UPGRADE ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information
• CVE-2020-10180 CRITICAL 9.8 UPGRADE UPGRADE The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
• CVE-2019-14688 HIGH 7.0 DOWNGRADE DOWNGRADE Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of
• CVE-2017-14082 HIGH 7.5 UPGRADE An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) vers
• CVE-2017-14081 HIGH 8.8 UPGRADE Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch
• CVE-2017-14080 CRITICAL 9.8 DOWNGRADE Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 al
• CVE-2017-14079 HIGH 8.8 DOWNGRADE Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote
• CVE-2017-14078 CRITICAL 9.8 DOWNGRADE SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow re
• CVE-2016-9319 MEDIUM 5.9 UPGRADE There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application
• CVE-2016-3664 HIGH 7.4 UPGRADE Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile applic

FAQ

How do I fix mobile security vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mobile security being exploited right now?

None of the tracked mobile security CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mobile security CVE should I patch first?

CVE-2023-32521 currently ranks highest (67/100): A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which co.

RSS feed for mobile security · ← Back to latest CVEs