ZeusQA
Start free

Known exploited vulnerabilities

Trend Micro vulnerabilities attackers have used

Every Trend Micro vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 12 Trend Micro vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2026-34926, added May 21, 2026. Apex One has the most entries (2).

In KEV, all time
12
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

By product

Apex One (2), Apex One and OfficeScan (2), Apex One, Apex One as a Service, and Worry-Free Business Security (2), Apex Central (1), Apex One and Apex One as a Service (1), Apex One and Worry-Free Business Security (1), Apex One, OfficeScan and Worry-Free Business Security Agents (1), Apex One, OfficeScan, and Worry-Free Business Security (1), OfficeScan (1).

Every Trend Micro entry in CISA KEV

  1. CVE-2026-34926

    Added · due

    Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

    Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.

  2. CVE-2025-54948

    Added · due

    Trend Micro Apex One OS Command Injection Vulnerability

    Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

  3. CVE-2023-41179

    Added · due

    Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

    Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must…

  4. CVE-2022-40139

    Added · due

    Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

    Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.

  5. CVE-2022-26871

    Added · due

    Trend Micro Apex Central Arbitrary File Upload Vulnerability

    An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.

  6. CVE-2021-36742

    Added · due

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.

  7. CVE-2021-36741

    Added · due

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.

  8. CVE-2020-8599

    Added · due

    Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

    Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login.

  9. CVE-2020-8468

    Added · due

    Trend Micro Multiple Products Content Validation Escape Vulnerability

    Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.

  10. CVE-2020-8467

    Added · due

    Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

    Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.

  11. CVE-2020-24557

    Added · due

    Trend Micro Multiple Products Improper Access Control Vulnerability

    Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security…

  12. CVE-2019-18187

    Added · due

    Trend Micro OfficeScan Directory Traversal Vulnerability

    Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works