AO
Endpoint Security
Apex One
On CISA KEVExploited in the wild
180
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 120Medium 47Low 0
Watch
Add Apex One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39753 | 7.5 | Oct 22 | An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations Affected: 2019 (14.0) before 14.0.0.12980 |
| CVE-2022-44654 | 7.5 | Dec 12 | Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps… Affected: before 14.0.11789; 2019 |
| CVE-2022-40141 | 7.5 | Sep 19 | A vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to intercept and decode certain communication strings that may contain some… Affected: 2019 |
| CVE-2022-24678 | 7.5 | Feb 24 | An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 2019 |
| CVE-2021-23139 | 7.5 | Oct 21 | A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations Affected: 2019; 2019 |
| CVE-2020-8470 | 7.5 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete… Affected: 2019 |
| CVE-2019-18188 | 7.5 | Oct 28 | Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a specific folder on the Apex One… Affected: 2019 |
| CVE-2019-9489 | 7.5 | Apr 5 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an… Affected: through b1066 |
| CVE-2022-40143 | 7.3 | Sep 19 | A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow a local attacker to abuse an insecure… Affected: 2019 |
| CVE-2022-45797 | 7.1 | Dec 12 | An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to… Affected: 2019 |
| CVE-2021-45442 | 7.1 | Jan 10 | A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the… Affected: 2019; 2019 |
| CVE-2021-44024 | 7.1 | Jan 10 | A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a… Affected: 2019; 2019 |
| CVE-2020-24558 | 7.1 | Sep 1 | A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an… Affected: 2019; saas |
| CVE-2025-71215 | 7.0 | May 21 | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on… Affected: All versions, or not specified |
| CVE-2024-36304 | 7.0 | Jun 10 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.12980 |
| CVE-2023-32555 | 7.0 | Jun 26 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12105; 2019 |
| CVE-2023-32554 | 7.0 | Jun 26 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12105; 2019 |
| CVE-2022-44651 | 7.0 | Dec 12 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.11789; 2019 |
| CVE-2022-41744 | 7.0 | Oct 10 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate privileges and turn a… Affected: 2019 (on-prem) and SaaS |
| CVE-2022-41745 | 7.0 | Oct 10 | An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service… Affected: 2019 (on-prem) and SaaS |