How many Trellix endpoint security CVEs are in CISA KEV?

None of Trellix endpoint security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Trellix endpoint security are affected?

8 distinct Trellix endpoint security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Trellix endpoint security CVEs?

Trellix endpoint security's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-281 (Improper Preservation of Permissions), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of Trellix endpoint security CVEs?

The average CVSS base score across Trellix endpoint security's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Trellix

4 CVEs

Trellix endpoint security Vulnerabilities

Name: Trellix endpoint security vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for endpoint security by Trellix.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.5

Avg CVSS

2022–2026

Last updated February 24, 2026

Overview

Trellix endpoint security has 4 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Trellix endpoint security, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Trellix endpoint security's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Trellix endpoint security's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Trellix endpoint security CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Trellix endpoint security version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 10.7.0 Update 151 CVE
< 35.31.221 CVE
<= 10.7.01 CVE
30.0.0 <= v <= 34.0.01 CVE
35.31.0-37 <= v <= 35.31.0-371 CVE
36.30.0-17 <= v <= 36.30.0-171 CVE

Fixed in

10.7.0 Update 151 CVE
35.31.221 CVE

Find a version

4 CVEs

Sort

Medium vulnerability · 2026-02-24
CVE-2025-14963CWE-20
Medium · CVSS 6.2
EPSS 0.1% (1th pct)2026-02-24
Medium vulnerability · 2024-01-10
CVE-2024-0310
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.4% (35th pct)2024-01-10
High vulnerability · 2023-10-04
CVE-2023-3665CWE-74
High · CVSS 7.8
EPSS 0.2% (13th pct)2023-10-04
Medium vulnerability · 2022-12-16
CVE-2022-4326
Patch
CWE-281
Medium · CVSS 6.0
EPSS 0.2% (13th pct)2022-12-16

Common weakness types

The CWE weakness categories most often found in Trellix endpoint security CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Trellix endpoint security CVEs were published each year.

2022

1

2023

1

2024

1

2026

1

Other Trellix products

Browse vulnerabilities for other products by Trellix.

agent6 CVEs enterprise security manager6 CVEs Trellix Agent5 CVEs ePolicy Orchestrator4 CVEs Intrusion Prevention System (IPS) Manager4 CVEs intrusion prevention system manager4 CVEs system information reporter3 CVEs Trellix Enterprise Security Manager (ESM)3 CVEs

All Trellix vulnerabilities

Frequently asked questions

Common questions about Trellix endpoint security vulnerabilities.

How many CVEs does Trellix endpoint security have?: Trellix endpoint security has 4 published CVE records since 2022.
How many Trellix endpoint security CVEs are in CISA KEV?: None of Trellix endpoint security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Trellix endpoint security vulnerabilities?: No Trellix endpoint security CVEs currently have a tracked public exploit in this dataset.
Which versions of Trellix endpoint security are affected?: 8 distinct Trellix endpoint security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Trellix endpoint security CVEs?: Trellix endpoint security's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-281 (Improper Preservation of Permissions), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of Trellix endpoint security CVEs?: The average CVSS base score across Trellix endpoint security's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Trellix endpoint security vulnerabilities

Monitor new Trellix endpoint security vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing