trend micro endpoint encryption vulnerabilities and fixes

Recent CVEs affecting trend micro endpoint encryption, with upgrade or downgrade steps. 8 tracked.

Also searched as: trendmicroendpointencryption.

trend micro endpoint encryption has 8 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-06-17. Highest priority: CVE-2025-49213 (score 66/100).

• CVE-2025-49218 HIGH 7.7 UPGRADE A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an att
• CVE-2025-49217 CRITICAL 9.8 UPGRADE An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-
• CVE-2025-49216 CRITICAL 9.8 UPGRADE An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an atta
• CVE-2025-49215 HIGH 8.8 UPGRADE A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an att
• CVE-2025-49214 HIGH 8.8 UPGRADE An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post
• CVE-2025-49213 CRITICAL 9.8 UPGRADE An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-
• CVE-2025-49212 CRITICAL 9.8 UPGRADE An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-
• CVE-2025-49211 HIGH 7.7 UPGRADE A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to e

FAQ

How do I fix trend micro endpoint encryption vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is trend micro endpoint encryption being exploited right now?

None of the tracked trend micro endpoint encryption CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which trend micro endpoint encryption CVE should I patch first?

CVE-2025-49213 currently ranks highest (66/100): An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-.

RSS feed for trend micro endpoint encryption · ← Back to latest CVEs