Patchfirst
Patchfirst

Vendor

Trend Micro

12 of 24 Trend Micro CVEs in Patchfirst (50%) are in of vulnerabilities exploited in the wild.

CVEs
24
In CISA KEV
1250%
Known ransomware use
0
Median days to KEV
97
from publication
Latest KEV listing
21 May 2026
Watch Trend Micro Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Apex One In KEV: 2 CVEs: 2
  • Apex One and OfficeScan In KEV: 2 CVEs: 2
  • Apex One, Apex One as a Service, and Worry-Free Business Security In KEV: 2 CVEs: 2
  • Apex Central In KEV: 1 CVEs: 1
  • Apex One and Apex One as a Service In KEV: 1 CVEs: 1
  • Apex One and Worry-Free Business Security In KEV: 1 CVEs: 1
  • Apex One, OfficeScan and Worry-Free Business Security Agents In KEV: 1 CVEs: 1
  • Apex One, OfficeScan, and Worry-Free Business Security In KEV: 1 CVEs: 1
  • OfficeScan In KEV: 1 CVEs: 1
  • Trend Micro InterScan Web Security Virtual Appliance In KEV: 0 CVEs: 5

Top ATT&CK techniques

What attackers do with Trend Micro CVEs
Open in ATT&CK Navigator

Counts are Trend Micro CVEs linked to the technique. Each link’s provenance is on the CVE page.

Trend Micro CVEs

24 CVEs, by priority
  1. CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
    Trend Micro · Apex OneKEVPublic exploitMedium · 6.7T1078Valid AccountsT1059Command and Scripting Interpreter
    13.4%Top 3.6%
    72.0priority
  2. CVE-2020-8468Trend Micro Multiple Products Content Validation Escape Vulnerability
    Trend Micro · Apex One, OfficeScan and Worry-Free Business Security AgentsKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation1 report
    6.2%Top 6.5%
    66.7priority
  3. CVE-2025-54948Trend Micro Apex One OS Command Injection Vulnerability
    Trend Micro · Apex OneKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    25.4%Top 2.1%
    64.4priority
  4. CVE-2022-26871Trend Micro Apex Central Arbitrary File Upload Vulnerability
    Trend Micro · Apex CentralKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    19.5%Top 2.6%
    64.3priority
  5. CVE-2020-8599Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
    Trend Micro · Apex One and OfficeScanKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1565Data Manipulation
    11.9%Top 3.9%
    64.1priority
  6. CVE-2020-8467Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
    Trend Micro · Apex One and OfficeScanKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    10.9%Top 4.1%
    63.3priority
  7. CVE-2019-18187Trend Micro OfficeScan Directory Traversal Vulnerability
    Trend Micro · OfficeScanKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    25.1%Top 2.1%
    62.8priority
  8. CVE-2021-36741Trend Micro Multiple Products Improper Input Validation Vulnerability
    Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business SecurityKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1505.003Web Shell
    5.0%Top 7.8%
    62.6priority
  9. CVE-2025-54987A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote…
    Trend Micro, Inc. · Trend Micro Apex OneCritical · 9.4
    21.5%Top 2.4%
    61.8priority
  10. CVE-2023-41179Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
    Trend Micro · Apex One and Worry-Free Business SecurityKEVHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    4.2%Top 9%
    61.2priority
  11. CVE-2022-40139Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
    Trend Micro · Apex One and Apex One as a ServiceKEVHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    3.4%Top 11%
    60.8priority
  12. CVE-2020-24557Trend Micro Multiple Products Improper Access Control Vulnerability
    Trend Micro · Apex One, OfficeScan, and Worry-Free Business SecurityKEVHigh · 7.8T1068Exploitation for Privilege Escalation
    2.7%Top 14%
    60.6priority
  13. CVE-2021-36742Trend Micro Multiple Products Improper Input Validation Vulnerability
    Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business SecurityKEVHigh · 7.8T1068Exploitation for Privilege Escalation
    1.5%Top 26%
    58.2priority
  14. CVE-2019-9489A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free…
    Trend Micro · Apex One, OfficeScan, Worry-Free Business Security1 report
    2.3%Top 17%
    56.1priority
  15. CVE-2020-8605A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute…
    Trend Micro · Trend Micro InterScan Web Security Virtual AppliancePublic exploit
    87.8%Top 0.24%
    25.0priority
  16. CVE-2020-8604A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose…
    Trend Micro · Trend Micro InterScan Web Security Virtual AppliancePublic exploit
    89.8%Top 0.21%
    25.0priority
  17. CVE-2020-8606A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass…
    Trend Micro · Trend Micro InterScan Web Security Virtual AppliancePublic exploit
    73.3%Top 0.54%
    24.9priority
  18. CVE-2017-11394Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute…
    Trend Micro · Trend Micro OfficeScanPublic exploit
    66.8%Top 0.71%
    24.9priority
  19. CVE-2017-11391Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote…
    Trend Micro · Trend Micro InterScan Messaging Security Virtual AppliancePublic exploit
    62.1%Top 0.82%
    24.8priority
  20. CVE-2020-8466A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved…
    Trend Micro · Trend Micro InterScan Web Security Virtual Appliance
    64.1%Top 0.78%
    20.5priority
  21. CVE-2023-32521A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could…
    Trend Micro, Inc. · Trend Micro Moibile Security for Enterprise
    66.8%Top 0.71%
    19.9priority
  22. CVE-2020-28578A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote…
    Trend Micro · Trend Micro InterScan Web Security Virtual Appliance
    73.0%Top 0.55%
    19.9priority
  23. CVE-2018-3604GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow…
    Trend Micro · Trend Micro Control Manager
    67.8%Top 0.68%
    19.9priority
  24. CVE-2018-10357A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to…
    Trend Micro · Trend Micro Endpoint Application Control
    64.7%Top 0.76%
    19.8priority
↑ ↓ chooseEnter openEsc close