AO
Endpoint Security
Apex One
On CISA KEVExploited in the wild
180
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 120Medium 47Low 0
Watch
Add Apex One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54948 In wildKEV | 9.8 | Aug 5 | Trend Micro Apex One OS Command Injection Vulnerability Affected: 2019 (14.0) before 14.0.0.14039 |
| CVE-2022-26871 In wildKEV | 9.8 | Mar 29 | Trend Micro Apex Central Arbitrary File Upload Vulnerability Affected: All versions, or not specified |
| CVE-2020-8599 In wildKEV | 9.8 | Mar 18 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Affected: 2019 |
| CVE-2021-36741 In wildKEV | 8.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: 2019, SaaS |
| CVE-2020-8468 In wildKEV | 8.8 | Mar 18 | Trend Micro Multiple Products Content Validation Escape Vulnerability Affected: 2019 |
| CVE-2020-8467 In wildKEV | 8.8 | Mar 18 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-36742 In wildKEV | 7.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: 2019, SaaS |
| CVE-2020-24557 In wildKEV | 7.8 | Sep 1 | Trend Micro Multiple Products Improper Access Control Vulnerability Affected: 2009 (on premise), SaaS |
| CVE-2023-41179 In wildKEV | 7.2 | Sep 19 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Affected: 2019 (14.0) before 14.0.0.12380; SaaS before 14.0.12637 |
| CVE-2022-40139 In wildKEV | 7.2 | Sep 19 | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Affected: 2019 (on-prem) and SaaS |
| CVE-2026-34926 In wildKEV | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2025-71211 | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-71210 | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-54987 | 9.8 | Aug 5 | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected… Affected: 2019 |
| CVE-2023-32557 | 9.8 | Jun 26 | A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server… Affected: before 14.0.12105; 2019 |
| CVE-2023-25143 | 9.8 | Mar 10 | An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected… Affected: before 14.0.11960; 2019 |
| CVE-2022-40144 | 9.8 | Sep 19 | A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product's login authentication by falsifying request parameters… Affected: 2019 |
| CVE-2020-8598 | 9.8 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to… Affected: 2019 |
| CVE-2019-18189 | 9.8 | Oct 28 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and… Affected: All versions, or not specified |
| CVE-2023-0587 | 9.1 | Feb 1 | A file upload vulnerability in exists in Trend Micro Apex One server build 11110 Affected: All versions, or not specified |
| CVE-2022-41746 | 9.1 | Oct 10 | A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate privileges and modify… Affected: 2019 (on-prem) and SaaS |
| CVE-2025-49155 | 8.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code… Affected: before 14.0.14492; 14.0.0.12994 before 14.0.0.14002 |
| CVE-2024-52047 | 8.8 | Dec 31 | A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations Affected: 2019 (14.0) before 14.0.0.12980 |
| CVE-2021-32465 | 8.8 | Aug 4 | An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass… Affected: 2019 |
| CVE-2026-45208 | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-45207 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-45206 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34930 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34929 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34928 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34927 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2025-71217 | 7.8 | May 21 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected… Affected: All versions, or not specified |
| CVE-2025-71216 | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations Affected: All versions, or not specified |
| CVE-2025-71214 | 7.8 | May 21 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations Affected: All versions, or not specified |
| CVE-2025-71213 | 7.8 | May 21 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-71212 | 7.8 | May 21 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-49158 | 7.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations Affected: before 14.0.14492; 14.0.0.12994 before 14.0.0.14002 |
| CVE-2025-49157 | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations Affected: before 14.0.14492; 14.0.0.12994 before 14.0.0.14002 |
| CVE-2025-49156 | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations Affected: before 14.0.14492; 14.0.0.12994 before 14.0.0.14002 |
| CVE-2025-49154 | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… Affected: before 14.0.14492; 14.0.0.12994 before 14.0.0.14002 |
| CVE-2024-58105 | 7.8 | Mar 25 | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on… Affected: before 14.0.14203; before 2019.13140 |
| CVE-2024-58104 | 7.8 | Mar 25 | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on… Affected: before 14.0.14203; before 2019.13140 |
| CVE-2024-55917 | 7.8 | Dec 31 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-55632 | 7.8 | Dec 31 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-55631 | 7.8 | Dec 31 | An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-52050 | 7.8 | Dec 31 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-52049 | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-52048 | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-37289 | 7.8 | Jun 10 | An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.13139; 14.0 before 14.0.0.12980 |
| CVE-2024-36305 | 7.8 | Jun 10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 14.0 before 14.0.0.12980 |