Trend Micro Trend Micro Security (Consumer)

Name: Trend Micro Trend Micro Security (Consumer)
Brand: Trend Micro

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical20high6medium0low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-18333US	high7.8	1.82% (79th)	Exploit	no fix	2019-02-05	≤ Versions below 15.0.0.1163
CVE-2019-18190US	critical9.8	2.68% (86th)	—	no fix	2019-12-09	≤ 2020 (Version 16.x)
CVE-2021-25251US	high7.2	2.58% (85th)	—	no fix	2021-02-10	≤ 2020 (v16), 2021 (v17)
CVE-2020-24560US	high7.5	1.77% (78th)	—	no fix	2020-09-24	≤ 2019 (v15)
CVE-2020-15604US	high7.5OT elevated	1.36% (72nd)	—	no fix	2020-09-24	≤ 2019 (v15)
CVE-2020-15603US	high7.5	1.23% (69th)	—	no fix	2020-07-15	≤ 2020 (v16)
CVE-2020-15602US	high7.8	1.05% (64th)	—	no fix	2020-07-15	≤ 2020 (v16)
CVE-2019-19697US	medium6.7	0.82% (57th)	—	no fix	2020-01-18	≤ 2019 (v15)
CVE-2018-10513US	high7.8	0.76% (55th)	—	no fix	2018-08-30	≤ 12.0 (2018)
CVE-2019-20357US	high7.8	0.73% (54th)	—	no fix	2020-01-18	≤ 2019 (v15) and 2020 (v16)
CVE-2019-19693US	high7.1	0.60% (48th)	—	no fix	2019-12-20	≤ 2020 (v16)
CVE-2019-14685US	high7.8	0.59% (48th)	—	no fix	2019-08-21	≤ 2019 (15.0)
CVE-2020-27697US	high7.8	0.57% (47th)	—	no fix	2020-11-18	≤ 2020 (v16)
CVE-2019-15628US	high7.8	0.52% (44th)	—	no fix	2019-12-02	≤ Version 2020 (16.0.1221 and below)
CVE-2020-27696US	high7.8	0.47% (41st)	—	no fix	2020-11-18	≤ 2020 (v16)
CVE-2020-27695US	high7.8	0.47% (41st)	—	no fix	2020-11-18	≤ 2020 (v16)
CVE-2021-36744US	high7.8	0.47% (41st)	—	no fix	2021-09-06	≤ 2019, 2020, 2021
CVE-2018-15363US	high7.8	0.47% (41st)	—	no fix	2018-08-30	≤ 12.0 (2018)
CVE-2021-44023US	high7.1	0.42% (36th)	—	no fix	2021-12-16	≤ 2021 (v17)
CVE-2018-10514US	high7.8	0.41% (35th)	—	no fix	2018-08-30	≤ 12.0 (2018)
CVE-2019-19694US	medium4.7	0.36% (30th)	—	no fix	2020-02-20	≤ 2019 (v15.0.0.1163 and below)
CVE-2022-30703US	high7.8	0.34% (27th)	—	no fix	2022-06-09	≤ 2022 (17.7.1383 and below)
CVE-2022-30702US	medium5.5	0.34% (27th)	—	no fix	2022-06-09	≤ 2022 (17.7.1130 and below)
CVE-2022-34893US	high7.8	0.30% (23rd)	—	no fix	2022-09-19	≤ 2022 (17.7.1179 and below)
CVE-2022-37348US	medium5.5	0.27% (20th)	—	no fix	2022-09-19	≤ 2022 (17.7.1383 and below)
CVE-2022-37347US	medium5.5	0.27% (20th)	—	no fix	2022-09-19	≤ 2022 (17.7.1383 and below)
CVE-2020-25775US	medium6.3	0.25% (16th)	—	no fix	2020-09-29	≤ 2020 (v16)

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')5 CVEs
CWE-426Untrusted Search Path4 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-428Unquoted Search Path or Element2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan