Trend Micro

The vulnerabilities12

1. 21 May 2026CVE-2026-34926Apex OneTrend Micro Apex One (On-Premise) Directory Traversal Vulnerability
2. 18 August 2025CVE-2025-54948Apex OneTrend Micro Apex One OS Command Injection Vulnerability
3. 21 September 2023CVE-2023-41179Apex One and Worry-Free Business SecurityTrend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
4. 15 September 2022CVE-2022-40139Apex One and Apex One as a ServiceTrend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
5. 31 March 2022CVE-2022-26871Apex CentralTrend Micro Apex Central Arbitrary File Upload Vulnerability
6. 3 November 2021CVE-2021-36742Apex One, Apex One as a Service, and Worry-Free Business SecurityTrend Micro Multiple Products Improper Input Validation Vulnerability
7. 3 November 2021CVE-2021-36741Apex One, Apex One as a Service, and Worry-Free Business SecurityTrend Micro Multiple Products Improper Input Validation Vulnerability
8. 3 November 2021CVE-2020-8599Apex One and OfficeScanTrend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
9. 3 November 2021CVE-2020-8468Apex One, OfficeScan and Worry-Free Business Security AgentsTrend Micro Multiple Products Content Validation Escape Vulnerability
10. 3 November 2021CVE-2020-8467Apex One and OfficeScanTrend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
11. 3 November 2021CVE-2020-24557Apex One, OfficeScan, and Worry-Free Business SecurityTrend Micro Multiple Products Improper Access Control Vulnerability
12. 3 November 2021CVE-2019-18187OfficeScanTrend Micro OfficeScan Directory Traversal Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.