Trend Micro: exploited vulnerabilities
- 12exploited vulnerabilities
- 0used by ransomware
- May 21, 2026latest one added
- Apex One 2
- Apex One, Apex One as a Service, and Worry-Free Business Security 2
- Apex One and OfficeScan 2
- Apex One and Worry-Free Business Security 1
- Apex One and Apex One as a Service 1
- Apex Central 1
- Apex One, OfficeScan and Worry-Free Business Security Agents 1
- Apex One, OfficeScan, and Worry-Free Business Security 1
- OfficeScan 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| May 21, 2026 | (On-Premise) Directory Traversal | Apex One | Medium 6.7 | 13% |
| Aug 18, 2025 | OS Command Injection | Apex One | Critical 9.4 | 25% |
| Sep 21, 2023 | Remote Code Execution | Apex One and Worry-Free Business Security | High 7.2 | 4.2% |
| Sep 15, 2022 | Improper Validation | Apex One and Apex One as a Service | High 7.2 | 3.4% |
| Mar 31, 2022 | Arbitrary File Upload | Apex Central | Critical 9.8 | 19% |
| Nov 3, 2021 | Multiple Products Improper Input Validation | Apex One, Apex One as a Service, and Worry-Free Business Security | High 7.8 | 1.5% |
| Nov 3, 2021 | Multiple Products Improper Input Validation | Apex One, Apex One as a Service, and Worry-Free Business Security | High 8.8 | 5.0% |
| Nov 3, 2021 | Authentication Bypass | Apex One and OfficeScan | Critical 9.8 | 12% |
| Nov 3, 2021 | Multiple Products Content Validation Escape | Apex One, OfficeScan and Worry-Free Business Security Agents | High 8.8 | 6.2% |
| Nov 3, 2021 | Remote Code Execution | Apex One and OfficeScan | High 8.8 | 11% |
| Nov 3, 2021 | Multiple Products Improper Access Control | Apex One, OfficeScan, and Worry-Free Business Security | High 7.8 | 2.7% |
| Nov 3, 2021 | Directory Traversal | OfficeScan | High 8.8 | 25% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.