https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-41178.htmlhttps://patchthecve.com/cve/CVE-2023-41178.htmlWed, 17 Jun 2026 06:20:54 +0000MEDIUM 6.1: Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note, this vulnerability is similar to, but not identical to, CVE-2023-41176.https://patchthecve.com/cve/CVE-2023-41177.htmlhttps://patchthecve.com/cve/CVE-2023-41177.htmlWed, 17 Jun 2026 06:20:54 +0000MEDIUM 6.1: Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note, this vulnerability is similar to, but not identical to, CVE-2023-41178.https://patchthecve.com/cve/CVE-2023-41176.htmlhttps://patchthecve.com/cve/CVE-2023-41176.htmlWed, 17 Jun 2026 06:20:54 +0000MEDIUM 6.1: Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note, this vulnerability is similar to, but not identical to, CVE-2023-41177.https://patchthecve.com/cve/CVE-2023-35695.htmlhttps://patchthecve.com/cve/CVE-2023-35695.htmlWed, 17 Jun 2026 06:05:01 +0000HIGH 7.5: A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product.https://patchthecve.com/cve/CVE-2023-32528.htmlhttps://patchthecve.com/cve/CVE-2023-32528.htmlWed, 17 Jun 2026 05:59:02 +0000HIGH 8.8: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit thhttps://patchthecve.com/cve/CVE-2023-32527.htmlhttps://patchthecve.com/cve/CVE-2023-32527.htmlWed, 17 Jun 2026 05:59:02 +0000HIGH 8.8: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit thhttps://patchthecve.com/cve/CVE-2023-32526.htmlhttps://patchthecve.com/cve/CVE-2023-32526.htmlWed, 17 Jun 2026 05:59:01 +0000MEDIUM 6.5: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploithttps://patchthecve.com/cve/CVE-2023-32525.htmlhttps://patchthecve.com/cve/CVE-2023-32525.htmlWed, 17 Jun 2026 05:59:01 +0000MEDIUM 6.5: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploithttps://patchthecve.com/cve/CVE-2023-32524.htmlhttps://patchthecve.com/cve/CVE-2023-32524.htmlWed, 17 Jun 2026 05:59:01 +0000HIGH 8.8: Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target https://patchthecve.com/cve/CVE-2023-32523.htmlhttps://patchthecve.com/cve/CVE-2023-32523.htmlWed, 17 Jun 2026 05:59:01 +0000HIGH 8.8: Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target https://patchthecve.com/cve/CVE-2023-32522.htmlhttps://patchthecve.com/cve/CVE-2023-32522.htmlWed, 17 Jun 2026 05:59:01 +0000HIGH 8.1: A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploihttps://patchthecve.com/cve/CVE-2023-32521.htmlhttps://patchthecve.com/cve/CVE-2023-32521.htmlWed, 17 Jun 2026 05:59:01 +0000CRITICAL 9.1: A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files.https://patchthecve.com/cve/CVE-2022-40980.htmlhttps://patchthecve.com/cve/CVE-2022-40980.htmlWed, 17 Jun 2026 05:02:20 +0000CRITICAL 9.1: A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.https://patchthecve.com/cve/CVE-2020-10193.htmlhttps://patchthecve.com/cve/CVE-2020-10193.htmlWed, 17 Jun 2026 02:47:28 +0000HIGH 7.5: ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Androihttps://patchthecve.com/cve/CVE-2020-10180.htmlhttps://patchthecve.com/cve/CVE-2020-10180.htmlWed, 17 Jun 2026 02:47:27 +0000CRITICAL 9.8: The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Securityhttps://patchthecve.com/cve/CVE-2019-14688.htmlhttps://patchthecve.com/cve/CVE-2019-14688.htmlWed, 17 Jun 2026 02:18:49 +0000HIGH 7.0: Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial produchttps://patchthecve.com/cve/CVE-2020-9264.htmlhttps://patchthecve.com/cve/CVE-2020-9264.htmlWed, 17 Jun 2026 03:27:39 +0000MEDIUM 5.5: ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security forhttps://patchthecve.com/cve/CVE-2017-14082.htmlhttps://patchthecve.com/cve/CVE-2017-14082.htmlWed, 17 Jun 2026 01:05:33 +0000HIGH 7.5: An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system.https://patchthecve.com/cve/CVE-2017-14081.htmlhttps://patchthecve.com/cve/CVE-2017-14081.htmlWed, 17 Jun 2026 01:05:33 +0000HIGH 8.8: Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.https://patchthecve.com/cve/CVE-2017-14080.htmlhttps://patchthecve.com/cve/CVE-2017-14080.htmlWed, 17 Jun 2026 01:05:33 +0000CRITICAL 9.8: Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.https://patchthecve.com/cve/CVE-2017-14079.htmlhttps://patchthecve.com/cve/CVE-2017-14079.htmlWed, 17 Jun 2026 01:05:32 +0000HIGH 8.8: Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.https://patchthecve.com/cve/CVE-2017-14078.htmlhttps://patchthecve.com/cve/CVE-2017-14078.htmlWed, 17 Jun 2026 01:05:32 +0000CRITICAL 9.8: SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.https://patchthecve.com/cve/CVE-2016-9319.htmlhttps://patchthecve.com/cve/CVE-2016-9319.htmlWed, 17 Jun 2026 00:55:50 +0000MEDIUM 5.9: There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398.https://patchthecve.com/cve/CVE-2016-3664.htmlhttps://patchthecve.com/cve/CVE-2016-3664.htmlWed, 17 Jun 2026 00:46:09 +0000HIGH 7.4: Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application login server, which allows man-in-the-middle attackers to spoof this server and obtain sensitive information via a crafted certificate.