TA
Product
TrendAI Apex One as a Service
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 20Medium 1Low 0
Watch
Add TrendAI Apex One as a Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34926 In wildKEV | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Affected: SaaS before 14.0.20731 |
| CVE-2025-71211 | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations Affected: SaaS before 14.0.20315 |
| CVE-2025-71210 | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations Affected: SaaS before 14.0.20315 |
| CVE-2025-49155 | 8.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code… Affected: SaaS before 14.0.14492 |
| CVE-2026-45208 | 7.8 | May 21 | A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20731 |
| CVE-2026-45207 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20731 |
| CVE-2026-45206 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20731 |
| CVE-2026-34930 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20731 |
| CVE-2026-34929 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20731 |
| CVE-2026-34928 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20731 |
| CVE-2026-34927 | 7.8 | May 21 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20731 |
| CVE-2025-71213 | 7.8 | May 21 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20315 |
| CVE-2025-71212 | 7.8 | May 21 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.20315 |
| CVE-2025-49158 | 7.8 | Jun 17 | An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations Affected: SaaS before 14.0.14492 |
| CVE-2025-49157 | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations Affected: SaaS before 14.0.14492 |
| CVE-2025-49156 | 7.8 | Jun 17 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations Affected: SaaS before 14.0.14492 |
| CVE-2025-49154 | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… Affected: SaaS before 14.0.14492 |
| CVE-2024-55917 | 7.8 | Dec 31 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.14203 |
| CVE-2024-55632 | 7.8 | Dec 31 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.14203 |
| CVE-2024-55631 | 7.8 | Dec 31 | An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.14203 |
| CVE-2024-52050 | 7.8 | Dec 31 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.14203 |
| CVE-2024-52049 | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.14203 |
| CVE-2024-52048 | 7.8 | Dec 31 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: SaaS before 14.0.14203 |
Showing 23