https://patchfirst.co/vendor/trend-micro/New and newly exploited Trend Micro CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-34926/CVE-2026-34926#kevThu, 21 May 2026 00:00:00 GMTTrend Micro · Apex One. In CISA KEV since 2026-05-21. ENISA EUVD lists it as exploited. EPSS 13.4% (higher than 96.4% of CVEs). CVSS 6.7 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 72.0 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2025-54948/CVE-2025-54948#kevMon, 18 Aug 2025 00:00:00 GMTTrend Micro · Apex One. In CISA KEV since 2025-08-18. ENISA EUVD lists it as exploited. EPSS 25.4% (higher than 97.9% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 64.4 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2025-54987/CVE-2025-54987Tue, 05 Aug 2025 00:00:00 GMTTrend Micro, Inc. · Trend Micro Apex One. Not in CISA KEV. EPSS 21.5% (higher than 97.6% of CVEs). CVSS 9.4 CRITICAL. Priority 61.8 of 100.https://patchfirst.co/cve/CVE-2023-41179/CVE-2023-41179#kevThu, 21 Sep 2023 00:00:00 GMTTrend Micro · Apex One and Worry-Free Business Security. In CISA KEV since 2023-09-21. ENISA EUVD lists it as exploited. EPSS 4.2% (higher than 91% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 61.2 of 100.kevT1078T1059https://patchfirst.co/cve/CVE-2023-32521/CVE-2023-32521Mon, 26 Jun 2023 00:00:00 GMTTrend Micro, Inc. · Trend Micro Moibile Security for Enterprise. Not in CISA KEV. EPSS 66.8% (higher than 99.29% of CVEs). Priority 19.9 of 100.https://patchfirst.co/cve/CVE-2022-40139/CVE-2022-40139Mon, 19 Sep 2022 00:00:00 GMTTrend Micro · Apex One and Apex One as a Service. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 89% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1072 Software Deployment Tools. Priority 60.8 of 100.kevT1078T1059T1072https://patchfirst.co/cve/CVE-2022-26871/CVE-2022-26871#kevThu, 31 Mar 2022 00:00:00 GMTTrend Micro · Apex Central. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 19.5% (higher than 97.4% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 64.3 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2020-8468/CVE-2020-8468#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Named in 1 threat report. Priority 66.7 of 100.kevT1190T1068https://patchfirst.co/cve/CVE-2020-8599/CVE-2020-8599#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · Apex One and OfficeScan. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 11.9% (higher than 96.1% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 64.1 of 100.kevT1190T1565https://patchfirst.co/cve/CVE-2020-8467/CVE-2020-8467#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · Apex One and OfficeScan. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 63.3 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2019-18187/CVE-2019-18187#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · OfficeScan. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 25.1% (higher than 97.9% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 62.8 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2021-36741/CVE-2021-36741#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 5.0% (higher than 92.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1505.003 Web Shell. Priority 62.6 of 100.kevT1190T1505.003https://patchfirst.co/cve/CVE-2020-24557/CVE-2020-24557#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · Apex One, OfficeScan, and Worry-Free Business Security. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 2.7% (higher than 85.7% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 60.6 of 100.kevT1068https://patchfirst.co/cve/CVE-2021-36742/CVE-2021-36742#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 58.2 of 100.kevT1068https://patchfirst.co/cve/CVE-2020-8466/CVE-2020-8466Thu, 17 Dec 2020 00:00:00 GMTTrend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 64.1% (higher than 99.22% of CVEs). Priority 20.5 of 100.https://patchfirst.co/cve/CVE-2020-28578/CVE-2020-28578Wed, 18 Nov 2020 00:00:00 GMTTrend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 73.0% (higher than 99.45% of CVEs). Priority 19.9 of 100.https://patchfirst.co/cve/CVE-2020-8605/CVE-2020-8605Wed, 27 May 2020 00:00:00 GMTTrend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 87.8% (higher than 99.76% of CVEs). Public exploit code exists. Priority 25.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2020-8604/CVE-2020-8604Wed, 27 May 2020 00:00:00 GMTTrend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 89.8% (higher than 99.79% of CVEs). Public exploit code exists. Priority 25.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2020-8606/CVE-2020-8606Wed, 27 May 2020 00:00:00 GMTTrend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 73.3% (higher than 99.46% of CVEs). Public exploit code exists. Priority 24.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2019-9489/CVE-2019-9489Fri, 05 Apr 2019 00:00:00 GMTTrend Micro · Apex One, OfficeScan, Worry-Free Business Security. Not in CISA KEV. EPSS 2.3% (higher than 82.9% of CVEs). Named in 1 threat report. Priority 56.1 of 100.https://patchfirst.co/cve/CVE-2018-10357/CVE-2018-10357Wed, 23 May 2018 00:00:00 GMTTrend Micro · Trend Micro Endpoint Application Control. Not in CISA KEV. EPSS 64.7% (higher than 99.24% of CVEs). Priority 19.8 of 100.https://patchfirst.co/cve/CVE-2018-3604/CVE-2018-3604Fri, 09 Feb 2018 00:00:00 GMTTrend Micro · Trend Micro Control Manager. Not in CISA KEV. EPSS 67.8% (higher than 99.32% of CVEs). Priority 19.9 of 100.https://patchfirst.co/cve/CVE-2017-11394/CVE-2017-11394Thu, 03 Aug 2017 00:00:00 GMTTrend Micro · Trend Micro OfficeScan. Not in CISA KEV. EPSS 66.8% (higher than 99.29% of CVEs). Public exploit code exists. Priority 24.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2017-11391/CVE-2017-11391Thu, 03 Aug 2017 00:00:00 GMTTrend Micro · Trend Micro InterScan Messaging Security Virtual Appliance. Not in CISA KEV. EPSS 62.1% (higher than 99.18% of CVEs). Public exploit code exists. Priority 24.8 of 100.public-exploit