Trend Micro known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 12 Trend Micro vulnerabilities: 1 added in the last 365 days, 3 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added May 21, 2026.

RSS feed for Trend Micro exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEV	CVE	Vulnerability	CVSS	EPSS	Federal due date	Ransomware use
2026-05-21	CVE-2026-34926	Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability	6.7 (v3.1)	13.4%	2026-06-04	Unknown
2025-08-18	CVE-2025-54948	Trend Micro Apex One OS Command Injection Vulnerability	9.4 (v3.1)	25.4%	2025-09-08	Unknown
2023-09-21	CVE-2023-41179	Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability	7.2 (v3.1)	4.2%	2023-10-12	Unknown
2022-09-15	CVE-2022-40139	Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability	7.2 (v3.1)	3.4%	2022-10-06	Unknown
2022-03-31	CVE-2022-26871	Trend Micro Apex Central Arbitrary File Upload Vulnerability	9.8 (v3.1)	19.5%	2022-04-21	Unknown
2021-11-03	CVE-2019-18187	Trend Micro OfficeScan Directory Traversal Vulnerability	7.5 (v3.1)	25.1%	2022-05-03	Unknown
2021-11-03	CVE-2020-24557	Trend Micro Multiple Products Improper Access Control Vulnerability	7.8 (v3.1)	2.7%	2022-05-03	Unknown
2021-11-03	CVE-2020-8467	Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability	8.8 (v3.1)	10.9%	2022-05-03	Unknown
2021-11-03	CVE-2020-8468	Trend Micro Multiple Products Content Validation Escape Vulnerability	8.8 (v3.1)	6.2%	2022-05-03	Unknown
2021-11-03	CVE-2020-8599	Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability	9.8 (v3.1)	11.9%	2022-05-03	Unknown
2021-11-03	CVE-2021-36741	Trend Micro Multiple Products Improper Input Validation Vulnerability	8.8 (v3.1)	5.0%	2021-11-17	Unknown
2021-11-03	CVE-2021-36742	Trend Micro Multiple Products Improper Input Validation Vulnerability	7.8 (v3.1)	1.5%	2021-11-17	Unknown