Brand
Trend Micro: actively exploited vulnerabilities
12 vulnerabilities in Trend Micro products (Apex One (ex-OfficeScan), Apex Central) are in CISA’s catalog of exploited vulnerabilities. Last added: May 21, 2026.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
1 vulnerability added in the last 12 months
-
12 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Trend Micro category to your radar, or open its page.
- Security products 12 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Trend Micro product (Apex One (ex-OfficeScan), Apex Central…) rather than the whole brand.
- Apex One (ex-OfficeScan)11 vulnerabilities, Security products
- Apex Central1 vulnerability, Security products
Name used by CISA: Trend Micro. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Trend Micro list.
- Rank 1
Trend Micro Apex One (ex-OfficeScan)CVE-2026-34926
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CVSS severity 6.7medium
Added May 21, 2026
- Rank 2
Trend Micro Apex One (ex-OfficeScan)CVE-2025-54948
Trend Micro Apex One OS Command Injection Vulnerability
CVSS severity 9.8critical
Added Aug 18, 2025
- Rank 3
Trend Micro Apex CentralCVE-2022-26871
Trend Micro Apex Central Arbitrary File Upload Vulnerability
CVSS severity 9.8critical
Added Mar 31, 2022
- Rank 4
Trend Micro Apex One (ex-OfficeScan)CVE-2020-8599
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 5
Trend Micro Apex One (ex-OfficeScan)CVE-2020-8467
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
- Rank 6
Trend Micro Apex One (ex-OfficeScan)CVE-2020-8468
Trend Micro Multiple Products Content Validation Escape Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
- Rank 7
Trend Micro Apex One (ex-OfficeScan)CVE-2021-36741
Trend Micro Multiple Products Improper Input Validation Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
- Rank 8
Trend Micro Apex One (ex-OfficeScan)CVE-2020-24557
Trend Micro Multiple Products Improper Access Control Vulnerability
CVSS severity 7.8high
Added Nov 3, 2021
- Rank 9
Trend Micro Apex One (ex-OfficeScan)CVE-2021-36742
Trend Micro Multiple Products Improper Input Validation Vulnerability
CVSS severity 7.8high
Added Nov 3, 2021
- Rank 10
Trend Micro Apex One (ex-OfficeScan)CVE-2019-18187
Trend Micro OfficeScan Directory Traversal Vulnerability
CVE from 2019, added in 2021
CVSS severity 7.5high
Added Nov 3, 2021
Show 2 more vulnerabilities
- Rank 11
Trend Micro Apex One (ex-OfficeScan)CVE-2023-41179
Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
CVSS severity 7.2high
Added Sep 21, 2023
- Rank 12
Trend Micro Apex One (ex-OfficeScan)CVE-2022-40139
Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
CVSS severity 7.2high
Added Sep 15, 2022
Follow and verify
Get new Trend Micro vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.