Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Trend Micro: actively exploited vulnerabilities

12 vulnerabilities in Trend Micro products (Apex One (ex-OfficeScan), Apex Central) are in CISA’s catalog of exploited vulnerabilities. Last added: May 21, 2026.

Trend Micro security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Trend Micro category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Apex One (ex-OfficeScan) 11 vulnerabilities · Security products
  • Apex Central 1 vulnerability · Security products

Name used by CISA: Trend Micro. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Trend Micro list.

  1. Rank 1Trend Micro Apex One (ex-OfficeScan)

    CVE-2026-34926

    Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 21, 2026
    CISA deadline
    14 days
    CVSS severity
    6.7 (medium)

  2. Rank 2Trend Micro Apex One (ex-OfficeScan)

    CVE-2025-54948

    Trend Micro Apex One OS Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 18, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Trend Micro Apex Central

    CVE-2022-26871

    Trend Micro Apex Central Arbitrary File Upload Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 31, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Trend Micro Apex One (ex-OfficeScan)

    CVE-2020-8599

    Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  5. Rank 5Trend Micro Apex One (ex-OfficeScan)

    CVE-2020-8467

    Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  6. Rank 6Trend Micro Apex One (ex-OfficeScan)

    CVE-2020-8468

    Trend Micro Multiple Products Content Validation Escape Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  7. Rank 7Trend Micro Apex One (ex-OfficeScan)

    CVE-2021-36741

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  8. Rank 8Trend Micro Apex One (ex-OfficeScan)

    CVE-2020-24557

    Trend Micro Multiple Products Improper Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  9. Rank 9Trend Micro Apex One (ex-OfficeScan)

    CVE-2021-36742

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  10. Rank 10Trend Micro Apex One (ex-OfficeScan)

    CVE-2019-18187

    CVE from 2019, added in 2021

    Trend Micro OfficeScan Directory Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)
Show 2 more vulnerabilities

  1. Rank 11Trend Micro Apex One (ex-OfficeScan)

    CVE-2023-41179

    Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 21, 2023
    CISA deadline
    21 days
    CVSS severity
    7.2 (high)

  2. Rank 12Trend Micro Apex One (ex-OfficeScan)

    CVE-2022-40139

    Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.2 (high)

Follow and verify

Get new Trend Micro vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.