CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2021-25252
Medium (5.5) in trendmicro. EPSS 0.6% chance of exploitation in the next 30 days.
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- trendmicro:apex_central
- trendmicro:apex_one
- trendmicro:cloud_edge
- trendmicro:control_manager
- trendmicro:deep_discovery_analyzer
- trendmicro:deep_discovery_email_inspector
- trendmicro:deep_discovery_inspector
- trendmicro:deep_security
- trendmicro:interscan_messaging_security_virtual_appliance
- trendmicro:interscan_web_security_virtual_appliance
- trendmicro:officescan
- trendmicro:portal_protect
- trendmicro:safe_lock
- trendmicro:scanmail
- trendmicro:scanmail_for_ibm_domino
- trendmicro:serverprotect
- trendmicro:serverprotect_for_network_appliance_filers
- trendmicro:serverprotect_for_storage
- trendmicro:worry-free_business_security