Vendor
Trend Micro, Inc.
575 known vulnerabilities in products by Trend Micro, Inc., 12 of them actively exploited (CISA KEV).
Key figures
575
Vulnerabilities
12
Actively exploited (KEV)
0
Used by ransomware
81
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-54948 | Trend Micro Apex One OS Command Injection Vulnerability In CISA KEV | 9.4 | |
| Critical | CVE-2022-26871 | Trend Micro Apex Central Arbitrary File Upload Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-8599 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-8467 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2019-18187 | Trend Micro OfficeScan Directory Traversal Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2020-8468 | Trend Micro Multiple Products Content Validation Escape Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2021-36741 | Trend Micro Multiple Products Improper Input Validation Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability In CISA KEV | 7.2 | |
| Critical | CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability In CISA KEV | 7.2 | |
| Critical | CVE-2020-24557 | Trend Micro Multiple Products Improper Access Control Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2026-34926 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability In CISA KEV | 6.7 | |
| Critical | CVE-2025-54987 | Trend Micro Apex One: OS Command Injection | 9.4 | |
| Critical | CVE-2025-49213 | Trend Micro Endpoint Encryption Policy Server: Use of Obsolete Function | 9.8 | |
| Critical | CVE-2025-49212 | Trend Micro Endpoint Encryption Policy Server: Use of Obsolete Function | 9.8 | |
| Critical | CVE-2025-71210 | Trend Micro TrendAI Apex One: Path Traversal | 9.8 | |
| Critical | CVE-2025-71211 | Trend Micro TrendAI Apex One: Path Traversal | 9.8 | |
| Critical | CVE-2016-7552 | Trend Micro Threat Discovery Appliance: Path Traversal | 9.8 | |
| Critical | CVE-2016-7547 | Trend Micro Threat Discovery Appliance: security vulnerability | 9.8 | |
| Critical | CVE-2020-28578 | Trend Micro InterScan Web Security Virtual Appliance: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-8606 | Trend Micro InterScan Web Security Virtual Appliance: Authentication Bypass | 9.8 | |
| Critical | CVE-2017-11394 | Trend Micro OfficeScan: Command Injection | 9.8 | |
| Critical | CVE-2020-8466 | Trend Micro InterScan Web Security Virtual Appliance: Command Injection | 9.8 | |
| Critical | CVE-2023-32521 | Trend Micro Moibile Security for Enterprise: Path Traversal | 9.1 | |
| Critical | CVE-2017-14078 | Trend Micro Mobile Security (Enterprise): SQL Injection | 9.8 |