https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:23:01 +0000 https://cve.radiocsirt.org/vuln/2025-0627-tm-wf-001 <p>SECURITY BULLETIN: June 2025 for Trend Micro Worry-Free Business Security and Worry-Free Business Security Services</p> <p>SECURITY BULLETIN: June 2025 for Trend Micro Worry-Free Business Security and Worry-Free Business Security Services</p> https://cve.radiocsirt.org/vuln/2025-0627-tm-wf-001 https://cve.radiocsirt.org/vuln/bdu:2026-01107 bdu:2026-01107 https://cve.radiocsirt.org/vuln/bdu:2026-01107 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0544 certfr-2025-avi-0544 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0544 https://cve.radiocsirt.org/vuln/euvd-2026-244665 EUVD-2026-244665 https://cve.radiocsirt.org/vuln/euvd-2026-244665 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49487 <p>An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations. An attacker must have had physical access to the target system in order to exploit this vulnerability due to need to access a certain hardware component. Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a previous WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.</p> <p>An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations. An attacker must have had physical access to the target system in order to exploit this vulnerability due to need to access a certain hardware component. Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a previous WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49487 https://cve.radiocsirt.org/vuln/ghsa-42hf-mxxr-h6xr <p>An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations.</p> <p>An attacker must have had physical access to the target system in order to exploit this vulnerability due to need to access a certain hardware component.</p> <p>Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a previous WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.</p> <p>An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations.</p> <p>An attacker must have had physical access to the target system in order to exploit this vulnerability due to need to access a certain hardware component.</p> <p>Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a previous WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.</p> https://cve.radiocsirt.org/vuln/ghsa-42hf-mxxr-h6xr https://cve.radiocsirt.org/vuln/jvndb-2025-009150 <p>Trend Micro Incorporated has released security updates for multiple Trend Micro products. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN.</p> <p>Trend Micro Incorporated has released security updates for multiple Trend Micro products. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-009150 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1255 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Worry-Free Business Security ausnutzen, um Dateien zu manipulieren oder beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Worry-Free Business Security ausnutzen, um Dateien zu manipulieren oder beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1255