Trend Micro vulnerabilities

CVEs per yearBy the year they were published

1. 201827
2. 201963
3. 202070
4. 202032
5. 202245
6. 202278

Known exploitedNewest addition to KEV first

• CVE-2022-40139

  Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex…

  Trend Micro · Trend Micro Apex One

  ExploitedHigh7.2
• CVE-2022-26871

  An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead…

  Trend Micro · Trend Micro Apex Central

  ExploitedCritical9.8
• CVE-2021-36742

  A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a…

  Trend Micro · Trend Micro Apex One

  ExploitedHigh7.8
• CVE-2021-36741

  An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a…

  Trend Micro · Trend Micro Apex One

  ExploitedHigh8.8
• CVE-2020-24557

  A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product…

  Trend Micro · Trend Micro Apex One

  ExploitedHigh7.8
• CVE-2020-8599

  Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary…

  Trend Micro · Trend Micro OfficeScan, Trend Micro Apex One

  ExploitedCritical9.8
• CVE-2020-8468

  Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability…

  Trend Micro · Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS)

  ExploitedHigh8.8
• CVE-2020-8467

  A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary…

  Trend Micro · Trend Micro OfficeScan, Trend Micro Apex One

  ExploitedHigh8.8
• CVE-2019-18187

  Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an…

  Trend Micro · Trend Micro OfficeScan

  ExploitedHigh8.8

Newest CVEs

• CVE-2022-41749

  An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please…

  Trend Micro · Trend Micro Apex One

  High7.8
• CVE-2022-41748

  A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with administrative credentials…

  Trend Micro · Trend Micro Apex One

  Medium6.7
• CVE-2022-41747

  An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with system service…

  Trend Micro · Trend Micro Apex One

  High7.8
• CVE-2022-41746

  A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate…

  Trend Micro · Trend Micro Apex One

  Critical9.1
• CVE-2022-41745

  An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on…

  Trend Micro · Trend Micro Apex One

  High7.0
• CVE-2022-41744

  A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate…

  Trend Micro · Trend Micro Apex One

  High7.0
• CVE-2022-40710

  A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate…

  Trend Micro · Trend Micro Deep Security

  High7.8
• CVE-2022-40709

  An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to…

  Trend Micro · Trend Micro Deep Security

  Low3.3
• CVE-2022-40708

  An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to…

  Trend Micro · Trend Micro Deep Security

  Low3.3
• CVE-2022-40707

  An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to…

  Trend Micro · Trend Micro Deep Security

  Low3.3