Trendmicro vulnerabilities11 known to be exploited.
Trendmicro has 539 published vulnerabilities across 107 products in our catalogue. 11 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Apex One, with 154. If you run Trendmicro software, patch the exploited flaws first.
The most recent Trendmicro flaw added to the known-exploited list is CVE-2025-54948, on 18 August 2025. We keep watching the known-exploited list.
Which Trendmicro products have the most vulnerabilities?
Apex One leads with 154 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Trendmicro vulnerabilities are being exploited?
11 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.4Trend Micro Apex One OS Command Injection Vulnerability
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected...
- 7.2Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution.
- 7.2Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.
- 9.8Trend Micro Apex Central Arbitrary File Upload Vulnerability
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.
- 9.8Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login.
- 8.8Trend Micro Multiple Products Improper Input Validation Vulnerability
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
- 8.8Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.
- 8.8Trend Micro Multiple Products Content Validation Escape Vulnerability
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.
Which Trendmicro flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 93%CVE-2016-7552Critical
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root.
- 93%CVE-2016-7547Critical
A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.
- 90%CVE-2020-8604High
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations.
All Trendmicro products we track.
90 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Apex Oneapex_one154 vulnerabilities7 versions
- Officescanofficescan71 vulnerabilities6 versions
- Worry-Free Business Securityworry-free_business_security57 vulnerabilities5 versions
- Apex Centralapex_central32 vulnerabilities1 version
- Interscan Web Security Virtual Applianceinterscan_web_security_virtual_appliance29 vulnerabilities6 versions
- Worry-Free Business Security Servicesworry-free_business_security_services25 vulnerabilities1 version
- Control Managercontrol_manager22 vulnerabilities2 versions
- Mobile Securitymobile_security21 vulnerabilities3 versions
- Email Encryption Gatewayemail_encryption_gateway19 vulnerabilities1 version
- Serverprotectserverprotect18 vulnerabilities3 versions
- Internet Securityinternet_security17 vulnerabilities11 versions
- Password Managerpassword_manager15 vulnerabilities20 versions
- Deep Security Agentdeep_security_agent14 vulnerabilities5 versions
- Interscan Messaging Security Virtual Applianceinterscan_messaging_security_virtual_appliance13 vulnerabilities4 versions
- Maximum Securitymaximum_security13 vulnerabilities8 versions
- Premium Securitypremium_security13 vulnerabilities6 versions
- Smart Protection Serversmart_protection_server13 vulnerabilities6 versions
- Antivirusantivirus12 vulnerabilities11 versions
- Maximum Security 2020maximum_security_202012 vulnerabilities8 versions
- Threat Discovery Appliancethreat_discovery_appliance12 vulnerabilities1 version
- Internet Security 2020internet_security_202011 vulnerabilities8 versions
- Premium Security 2020premium_security_202011 vulnerabilities8 versions
- Housecallhousecall9 vulnerabilities2 versions
- Trend Micro Endpoint Encryptiontrend_micro_endpoint_encryption9 vulnerabilities1 version
This directory lists the 90 Trendmicro products with at least one tracked version, of 107 in our catalogue.
Running Trendmicro? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
- Matched to
- Apex One on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 539 published vulnerabilities across 107 products and 313 versions from Trendmicro. The most recent Trendmicro flaw added to the known-exploited list is CVE-2025-54948, on 18 August 2025.
11 Trendmicro vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2025-54948, CVE-2023-41179 and CVE-2022-40139. The full list is on this page.
Apex One, with 154 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Trendmicro products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.