What’s Vulnerable › Vulnerabilities

CVE-2021-25251

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-10 · updated 2026-06-17
• Weakness: CWE-94

Description

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

Affected products

• Trendmicro Antivirus+ Security 2020: 16.0
• Trendmicro Antivirus+ Security 2021: 17.0
• Trendmicro Internet Security 2020: 16.0
• Trendmicro Internet Security 2021: 17.0
• Trendmicro Maximum Security 2020: 16.0
• Trend Micro Maxmium Security (Consumer): 17.0
• Trendmicro Premium Security 2020: 16.0
• Trendmicro Premium Security 2021: 17.0

References

• https://helpcenter.trendmicro.com/en-us/article/TMKA-10211
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10211

Get alerted when CVE-2021-25251 or the next vulnerability affects your stack