[ Vendor · 12 CVEs ]
Trend Micro
CVEs affecting Trend Micro published in the last 30 days, plus any Trend Micro CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-34926 | 21 May 2026 | CVSS 6.7 | Trend Micro Apex One (On-Premise) Directory TraversalA directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the… | Exploited |
| CVE-2025-54948 | 5 Aug 2025 | CVSS 9.8 | Trend Micro Apex One OS Command InjectionA vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and… | ExploitedFix |
| CVE-2023-41179 | 19 Sep 2023 | CVSS 7.2 | Trend Micro Apex One and Worry-Free Business Security Remote Code ExecutionA vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and… | Exploited |
| CVE-2022-40139 | 19 Sep 2022 | CVSS 7.2 | Trend Micro Apex One and Apex One as a Service Improper ValidationImproper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could… | ExploitedFix |
| CVE-2022-26871 | 29 Mar 2022 | CVSS 9.8 | Trend Micro Apex Central Arbitrary File UploadAn arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which… | ExploitedFix |
| CVE-2021-36741 | 29 Jul 2021 | CVSS 8.8 | Trend Micro Multiple Products Improper Input ValidationAn improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1… | Exploited |
| CVE-2021-36742 | 29 Jul 2021 | CVSS 7.8 | Trend Micro Multiple Products Improper Input ValidationA improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1… | Exploited |
| CVE-2020-24557 | 1 Sep 2020 | CVSS 7.8 | Trend Micro Multiple Products Improper Access ControlA vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a… | Exploited |
| CVE-2020-8468 | 18 Mar 2020 | CVSS 8.8 | Trend Micro Multiple Products Content Validation EscapeTrend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape… | ExploitedFix |
| CVE-2020-8599 | 18 Mar 2020 | CVSS 9.8 | Trend Micro Apex One and OfficeScan Authentication BypassTrend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an… | ExploitedFix |
| CVE-2020-8467 | 18 Mar 2020 | CVSS 8.8 | Trend Micro Apex One and OfficeScan Remote Code ExecutionA migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute… | ExploitedFix |
| CVE-2019-18187 | 28 Oct 2019 | CVSS 7.5 | Trend Micro OfficeScan Directory TraversalTrend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files… | Exploited |