CVE-2016-3664: Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile app...

Security readout for executives and security teams

Older Trend Micro Mobile Security for iOS versions failed to properly confirm the identity of the login server. A network attacker could impersonate that server with a crafted certificate and capture sensitive information. The bundle does not provide CVSS, CWE, or evidence of active exploitation. Exposure appears limited to organizations with Trend Micro Mobile Security for iOS versions earlier than 3.2.1188. The source bundle does not identify affected CPEs, deployment scale, or specific data types exposed during login. Treat this as a targeted mobile exposure issue, not a broad infrastructure emergency. Prioritize if the organization still supports legacy iOS devices or managed deployments of this app, especially among users handling sensitive information on untrusted networks. Mitigation focus: Upgrade Trend Micro Mobile Security for iOS to 3.2.1188 or later.; Check Trend Micro support guidance for any additional remediation instructions.; Use MDM controls to block or remove outdated app versions..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.