CISA KEV by vendor

Trend Micro vulnerabilities in the CISA KEV catalogue

12 Trend Micro entries in CISA's Known Exploited Vulnerabilities catalogue, 0 of them (0 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 21 May 2026.

Last updated MethodologyDownload all entries (CSV)

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

12entries, 0.7% of the catalogue
0known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Trend Micro products in the catalogue, by number of entries
Product, as CISA names itEntries
Apex One2
Apex One, Apex One as a Service, and Worry-Free Business Security2
Apex One and OfficeScan2
Apex One and Worry-Free Business Security1
Apex One and Apex One as a Service1
Apex Central1
Apex One, OfficeScan and Worry-Free Business Security Agents1
Apex One, OfficeScan, and Worry-Free Business Security1
OfficeScan1

Latest additions

The 10 most recent Trend Micro entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-34926Apex One2026-05-212026-06-04Unknown6.7 Medium13.4%Not auto, total3 days + triage
CVE-2025-54948Apex One2025-08-182025-09-08Unknown9.8 Critical25.4%Auto, total3 days + triage
CVE-2023-41179Apex One and Worry-Free Business Security2023-09-212023-10-12Unknown7.2 High4.2%Not auto, total3 days + triage
CVE-2022-40139Apex One and Apex One as a Service2022-09-152022-10-06Unknown7.2 High3.4%Not auto, total3 days + triage
CVE-2022-26871Apex Central2022-03-312022-04-21Unknown9.8 Critical19.4%Auto, total3 days + triage
CVE-2021-36742Apex One, Apex One as a Service, and Worry-Free Business Security2021-11-032021-11-17Unknown7.8 High1.4%Not auto, total3 days + triage
CVE-2021-36741Apex One, Apex One as a Service, and Worry-Free Business Security2021-11-032021-11-17Unknown8.8 High4.9%Not auto, total3 days + triage
CVE-2020-8599Apex One and OfficeScan2021-11-032022-05-03Unknown9.8 Critical11.8%Auto, total3 days + triage
CVE-2020-8468Apex One, OfficeScan and Worry-Free Business Security Agents2021-11-032022-05-03Unknown8.8 High6.1%Auto, total3 days + triage
CVE-2020-8467Apex One and OfficeScan2021-11-032022-05-03Unknown8.8 High10.9%Not auto, total3 days + triage

All 12 entries

Every Trend Micro entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-34926Apex One2026-05-212026-06-04Unknown6.7 Medium13.4%Not auto, total3 days + triage
CVE-2025-54948Apex One2025-08-182025-09-08Unknown9.8 Critical25.4%Auto, total3 days + triage
CVE-2023-41179Apex One and Worry-Free Business Security2023-09-212023-10-12Unknown7.2 High4.2%Not auto, total3 days + triage
CVE-2022-40139Apex One and Apex One as a Service2022-09-152022-10-06Unknown7.2 High3.4%Not auto, total3 days + triage
CVE-2022-26871Apex Central2022-03-312022-04-21Unknown9.8 Critical19.4%Auto, total3 days + triage
CVE-2021-36742Apex One, Apex One as a Service, and Worry-Free Business Security2021-11-032021-11-17Unknown7.8 High1.4%Not auto, total3 days + triage
CVE-2021-36741Apex One, Apex One as a Service, and Worry-Free Business Security2021-11-032021-11-17Unknown8.8 High4.9%Not auto, total3 days + triage
CVE-2020-8599Apex One and OfficeScan2021-11-032022-05-03Unknown9.8 Critical11.8%Auto, total3 days + triage
CVE-2020-8468Apex One, OfficeScan and Worry-Free Business Security Agents2021-11-032022-05-03Unknown8.8 High6.1%Auto, total3 days + triage
CVE-2020-8467Apex One and OfficeScan2021-11-032022-05-03Unknown8.8 High10.9%Not auto, total3 days + triage
CVE-2020-24557Apex One, OfficeScan, and Worry-Free Business Security2021-11-032022-05-03Unknown7.8 High2.6%Not auto, total3 days + triage
CVE-2019-18187OfficeScan2021-11-032022-05-03Unknown7.5 High25.1%Not auto, total3 days + triage

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Trend Micro in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.