AO
Endpoint Security
Apex One
On CISA KEVExploited in the wild
180
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 120Medium 47Low 0
Watch
Add Apex One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-36741 In wildKEV | 8.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: 2019, SaaS |
| CVE-2020-8468 In wildKEV | 8.8 | Mar 18 | Trend Micro Multiple Products Content Validation Escape Vulnerability Affected: 2019 |
| CVE-2020-8467 In wildKEV | 8.8 | Mar 18 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-36742 In wildKEV | 7.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: 2019, SaaS |
| CVE-2020-24557 In wildKEV | 7.8 | Sep 1 | Trend Micro Multiple Products Improper Access Control Vulnerability Affected: 2009 (on premise), SaaS |
| CVE-2023-41179 In wildKEV | 7.2 | Sep 19 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Affected: 2019 (14.0) before 14.0.0.12380; SaaS before 14.0.12637 |
| CVE-2022-40139 In wildKEV | 7.2 | Sep 19 | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Affected: 2019 (on-prem) and SaaS |
| CVE-2025-49155 | 8.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code… Affected: 2019 (14.0) before 14.0.0.14002 |
| CVE-2024-52047 | 8.8 | Dec 31 | A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations Affected: 2019 (14.0) before 14.0.0.12980 |
| CVE-2021-32465 | 8.8 | Aug 4 | An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass… Affected: 2019 |
| CVE-2026-45208 | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-45207 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-45206 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34930 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34929 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34928 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2026-34927 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2025-71217 | 7.8 | May 21 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected… Affected: All versions, or not specified |
| CVE-2025-71216 | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations Affected: All versions, or not specified |
| CVE-2025-71214 | 7.8 | May 21 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations Affected: All versions, or not specified |
| CVE-2025-71213 | 7.8 | May 21 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-71212 | 7.8 | May 21 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-49158 | 7.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations Affected: 2019 (14.0) before 14.0.0.14002 |
| CVE-2025-49157 | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations Affected: 2019 (14.0) before 14.0.0.14002 |
| CVE-2025-49156 | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations Affected: 2019 (14.0) before 14.0.0.14002 |
| CVE-2025-49154 | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… Affected: 2019 (14.0) before 14.0.0.14002 |
| CVE-2024-58105 | 7.8 | Mar 25 | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on… Affected: 2019 (14.0) before 14.0.0.13122 |
| CVE-2024-58104 | 7.8 | Mar 25 | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on… Affected: 2019 (14.0) before 14.0.0.13122 |
| CVE-2024-55917 | 7.8 | Dec 31 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-55632 | 7.8 | Dec 31 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-55631 | 7.8 | Dec 31 | An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-52050 | 7.8 | Dec 31 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-52049 | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-52048 | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.13140 |
| CVE-2024-37289 | 7.8 | Jun 10 | An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.13139; 14.0 before 14.0.0.12980 |
| CVE-2024-36305 | 7.8 | Jun 10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: 14.0 before 14.0.0.12980 |
| CVE-2024-36303 | 7.8 | Jun 10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: 14.0 before 14.0.13139 |
| CVE-2024-36302 | 7.8 | Jun 10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.13139; 14.0 before 14.0.0.12980 |
| CVE-2023-52094 | 7.8 | Jan 23 | An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local… Affected: before 14.0.12849; 2019 |
| CVE-2023-52093 | 7.8 | Jan 23 | An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-52092 | 7.8 | Jan 23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-52091 | 7.8 | Jan 23 | An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-52090 | 7.8 | Jan 23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-47202 | 7.8 | Jan 23 | A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47201 | 7.8 | Jan 23 | A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47200 | 7.8 | Jan 23 | A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47199 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47198 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47197 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47196 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |