Trend Micro vulnerabilities
We track 175 vulnerabilities in Trend Micro products across 60+ products. 174 are rated high or critical, and 12 have been exploited in real attacks. The most recent was published on May 21, 2026.
Latest Trend Micro vulnerabilities
- 9.8 Critical severity
Trend Micro ServerProtect for Storage: Use of Hard-coded Credentials
Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to
- 7.8 High severity
Trend Micro Apex One: Improper Link Resolution Before File Access
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local at
- 7.8 High severity
Trend Micro Apex One: Improper Link Resolution Before File Access
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local at
- 7.5 High severity
Trend Micro Apex One: Uncontrolled Resource Consumption
An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow an atta
- 7.8 High severity
Trend Micro Antivirus for Mac: Improper Link Resolution Before File Access
A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to modify a file during the update process and escalate their privileges. Please note: an attacker must first obtain the abili
- 7.1 High severity
Trend Micro Worry-Free Business Security: Out-of-bounds Read
A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain th
- 7.8 High severity
Trend Micro Deep Security Agent for Linux: Improper Control of Generation of Code
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first
- 7.5 High severity
Trend Micro Deep Security Agent for Linux: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised
- 7.8 High severity
Trend Micro Multiple Products Improper Input Validation Exploited
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obta
- 8.8 High severity
Trend Micro Multiple Products Improper Input Validation Exploited
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must firs
- 7.8 High severity
Trend Micro Multiple Products Improper Access Control Exploited
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege e
- 9.8 Critical severity
Trend Micro Apex One and OfficeScan Authentication Bypass Exploited
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this v
- 8.8 High severity
Trend Micro Multiple Products Content Validation Escape Exploited
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requi
- 8.8 High severity
Trend Micro Apex One and OfficeScan Remote Code Execution Exploited
A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.
- 7.5 High severity
Trend Micro OfficeScan Directory Traversal Exploited
Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote