Known vulnerabilities in Maximum Security

Vendor: Trend Micro
Software: Maximum Security
Software CPE: cpe:2.3:a:trend_micro:maximum_security:*:*:*:*:*:windows:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Maximum Security Maximum Security is affected by 13 known vulnerabilities: 2 medium, 11 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112063 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-52521		 CWE-59 Low
No
No
 17.8.1476 01.07.2025 SB2025070107
#VU110660 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-49385		 CWE-59 Low
No
No
 17.8.1464 09.06.2025 SB2025060933
#VU88974 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-32849		 CWE-59 Low
No
No
 - 24.04.2024 SB2024042423
#VU70549 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-48191		 CWE-367 Low
No
No
 2022 v17.7 Hotfix 02.01.2023 SB2023010201
#VU66907 - Out-of-bounds read
CVE-2022-37347		 CWE-125 Low
No
No
 2021 v17.0 Hotfix, 2022 v17.7 Hotfix 01.09.2022 SB2022070801
#VU66905 - Out-of-bounds read
CVE-2022-37348		 CWE-125 Low
No
No
 2021 v17.0 Hotfix, 2022 v17.7 Hotfix 01.09.2022 SB2022070801
#VU65018 - Out-of-bounds read
CVE-2022-35234		 CWE-125 Low
No
No
 2021 v17.0 Hotfix, 2022 v17.7 Hotfix 08.07.2022 SB2022070801
#VU63130 - Improper Link Resolution Before File Access ('Link Following')
CVE-2022-30687		 CWE-59 Low
No
No
 2022 v17.7 Hotfix 13.05.2022 SB2022051301
#VU53419 - Incorrect Default Permissions
CVE-2021-32460		 CWE-276 Low
No
No
 - 21.05.2021 SB2021052108
#VU50685 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-25251		 CWE-89 Low
No
No
 - 15.02.2021 SB2021021506
#VU46982 - Improper Certificate Validation
CVE-2020-24560		 CWE-295 Medium
No
No
 2020 (v16), 2021 (v17) 23.09.2020 SB2020092324
#VU46977 - Download of Code Without Integrity Check
CVE-2020-15604		 CWE-494 Medium
No
No
 2020 (v16), 2021 (v17) 23.09.2020 SB2020092324
#VU25346 - Resource exhaustion
CVE-2019-19694		 CWE-400 Low
No
No
 16 14.02.2020 SB2020021403