By year
99
00
01
02
03
04
05
06
07
08
09
11
12
15
16
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited Trend Micro flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory TraversalExploited since May 21, 2026 · CVSS 6.7
- CVE-2025-54948 Trend Micro Apex One OS Command InjectionExploited since Aug 18, 2025 · CVSS 9.4
- CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code ExecutionExploited since Sep 21, 2023 · CVSS 7.2
- CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper ValidationExploited since Sep 15, 2022 · CVSS 7.2
- CVE-2022-26871 Trend Micro Apex Central Arbitrary File UploadExploited since Mar 31, 2022 · CVSS 9.8
- CVE-2021-36742 Trend Micro Multiple Products Improper Input ValidationExploited since Nov 3, 2021 · CVSS 7.8
- CVE-2021-36741 Trend Micro Multiple Products Improper Input ValidationExploited since Nov 3, 2021 · CVSS 8.8
- CVE-2020-24557 Trend Micro Multiple Products Improper Access ControlExploited since Nov 3, 2021 · CVSS 7.8
- CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication BypassExploited since Nov 3, 2021 · CVSS 9.8
- CVE-2020-8468 Trend Micro Multiple Products Content Validation EscapeExploited since Nov 3, 2021 · CVSS 8.8
- CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code ExecutionExploited since Nov 3, 2021 · CVSS 8.8
- CVE-2019-18187 Trend Micro OfficeScan Directory TraversalExploited since Nov 3, 2021 · CVSS 7.5
Latest high and critical flaws
- CVE-2026-45208 A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2026-45207 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2026-45206 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2026-34930 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2026-34929 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2026-34928 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2026-34927 An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2025-71217 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges oHigh 7.8 · May 21, 2026
- CVE-2025-71216 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affecteHigh 7.8 · May 21, 2026
- CVE-2025-71215 A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate High 7 · May 21, 2026
- CVE-2025-71214 An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected iHigh 7.8 · May 21, 2026
- CVE-2025-71213 An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2025-71212 A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.High 7.8 · May 21, 2026
- CVE-2025-71211 A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installatCritical 9.8 · May 21, 2026
- CVE-2025-71210 A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installatCritical 9.8 · May 21, 2026
- CVE-2025-69260 A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installHigh 7.5 · Jan 8, 2026
- CVE-2025-69259 A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affecteHigh 7.5 · Jan 8, 2026
- CVE-2025-69258 A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executablCritical 9.8 · Jan 8, 2026
- CVE-2025-54987 A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute comCritical 9.4 · Aug 5, 2025
- CVE-2025-54948 Trend Micro Apex One OS Command InjectionExploited · Critical 9.4 · Aug 5, 2025
- CVE-2025-53503 Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend MHigh 7.8 · Jul 10, 2025
- CVE-2025-53378 A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remoHigh 7.6 · Jul 10, 2025
- CVE-2025-52837 Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an atHigh 7.8 · Jul 10, 2025
- CVE-2025-52521 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionHigh 7.8 · Jul 10, 2025
- CVE-2025-49385 Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionHigh 7.8 · Jun 17, 2025
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.