Skip to main content
EVULNABLE
Home

Trend Micro

CVEs currently on EVULNABLE's Priority Feed for Trend Micro, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 0 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 0 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 1 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 0 added to KEV
1
0
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2000
2026-04-2700
2026-05-0400
2026-05-1100
2026-05-1810
2026-05-2500
2026-06-0100
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)00

In EVULNABLE's ranked feed

Showing all 12 Trend Micro CVEs in EVULNABLE's ranked feed.

#1 75 Urgent CVE-2019-18187 KEV since 2021 · listed over a yearCISA KEV Trend Micro — Trend Micro OfficeScan Directory Traversal Vulnerability KEV, EPSS 25.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS25.1% · 97.9th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.251.

Full CVE pageNVD ↗CISA KEV ↗
#2 75 Urgent CVE-2025-54948 KEV since 2025 · listed over a yearCISA KEV Trend Micro — Trend Micro Apex One OS Command Injection Vulnerability KEV, EPSS 23.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS23.9% · 97.8th pctlKEV since2025-08-18

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.239.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#3 75 Urgent CVE-2022-26871 KEV since 2022 · listed over a yearCISA KEV Trend Micro — Trend Micro Apex Central Arbitrary File Upload Vulnerability KEV, EPSS 19.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS19.5% · 97.3rd pctlKEV since2022-03-31

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.195.

Full CVE pageNVD ↗CISA KEV ↗
#4 75 Urgent CVE-2020-8599 KEV since 2021 · listed over a yearCISA KEV Trend Micro — Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability KEV, EPSS 11.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS11.9% · 96.1st pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.119.

Full CVE pageNVD ↗CISA KEV ↗
#5 75 Urgent CVE-2020-8467 KEV since 2021 · listed over a yearCISA KEV Trend Micro — Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability KEV, EPSS 10.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS10.9% · 95.8th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.109.

Full CVE pageNVD ↗CISA KEV ↗
#6 75 Urgent CVE-2020-8468 KEV since 2021 · listed over a yearCISA KEV Trend Micro — Trend Micro Multiple Products Content Validation Escape Vulnerability KEV, EPSS 6.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS6.2% · 93.4th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.062.

Full CVE pageNVD ↗CISA KEV ↗
#7 75 Urgent CVE-2021-36741 KEV since 2021 · listed over a yearCISA KEV Trend Micro — Trend Micro Multiple Products Improper Input Validation Vulnerability KEV, EPSS 5.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS5.0% · 92.1st pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.050.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#8 75 Urgent CVE-2023-41179 KEV since 2023 · listed over a yearCISA KEV Trend Micro — Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability KEV, EPSS 4.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS4.3% · 90.9th pctlKEV since2023-09-21

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.043.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#9 75 Urgent CVE-2022-40139 KEV since 2022 · listed over a yearCISA KEV Trend Micro — Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability KEV, EPSS 3.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS3.3% · 88.3rd pctlKEV since2022-09-15

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.033.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#10 75 Urgent CVE-2020-24557 KEV since 2021 · listed over a yearCISA KEV Trend Micro — Trend Micro Multiple Products Improper Access Control Vulnerability KEV, EPSS 2.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS2.7% · 85.5th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.027.

Full CVE pageNVD ↗CISA KEV ↗
#11 75 Urgent CVE-2021-36742 KEV since 2021 · listed over a yearCISA KEV Trend Micro — Trend Micro Multiple Products Improper Input Validation Vulnerability KEV, EPSS 1.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS1.5% · 73.5th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.015.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#12 75 Urgent CVE-2026-34926 CISA federal deadline · Overdue by 4 monthsCISA KEV Trend Micro — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability KEV, EPSS 0.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.7 (NVD)EPSS0.5% · 44th pctlKEV since2026-05-21

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.005.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗