Cyberfeed6 › Vendors › Trend Micro
CISA lists 12 Trend Micro vulnerabilities as exploited in real attacks. Most entries concern Apex One, Apex One, Apex One as a Service, and Worry-Free Business Security, Apex One and OfficeScan, Apex One and Worry-Free Business Security.
Showing the 12 most recently added of 12. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | Apex One | 2026-05-21 | Medium (6.7) | No | Vendor notice |
| CVE-2025-54948Trend Micro Apex One OS Command Injection Vulnerability | Apex One | 2025-08-18 | Critical (9.4) | No | Vendor notice |
| CVE-2023-41179Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | Apex One and Worry-Free Business Security | 2023-09-21 | High (7.2) | No | Vendor notice |
| CVE-2022-40139Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | Apex One and Apex One as a Service | 2022-09-15 | High (7.2) | No | Vendor notice |
| CVE-2022-26871Trend Micro Apex Central Arbitrary File Upload Vulnerability | Apex Central | 2022-03-31 | Critical (9.8) | No | |
| CVE-2021-36742Trend Micro Multiple Products Improper Input Validation Vulnerability | Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | High (7.8) | No | Vendor notice |
| CVE-2021-36741Trend Micro Multiple Products Improper Input Validation Vulnerability | Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | High (8.8) | No | Vendor notice |
| CVE-2020-8599Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | Apex One and OfficeScan | 2021-11-03 | Critical (9.8) | No | |
| CVE-2020-8468Trend Micro Multiple Products Content Validation Escape Vulnerability | Apex One, OfficeScan and Worry-Free Business Security Agents | 2021-11-03 | High (8.8) | No | |
| CVE-2020-8467Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | Apex One and OfficeScan | 2021-11-03 | High (8.8) | No | |
| CVE-2020-24557Trend Micro Multiple Products Improper Access Control Vulnerability | Apex One, OfficeScan, and Worry-Free Business Security | 2021-11-03 | High (7.8) | No | |
| CVE-2019-18187Trend Micro OfficeScan Directory Traversal Vulnerability | OfficeScan | 2021-11-03 | High (8.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.