Trend Micro vulnerabilities and fixes
CVEs that mention Trend Micro, ranked by priority. 10 tracked.
Trend Micro has 10 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 6. Most recent: 2026-05-27. Highest priority: CVE-2026-34926 (score 73/100).
- CVE-2026-34926 MEDIUM 6.7 EXPLOITED UPGRADE Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
- CVE-2025-71210 CRITICAL 9.8 UPGRADE A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicio
- CVE-2025-71211 CRITICAL 9.8 UPGRADE A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicio
- CVE-2025-71212 HIGH 7.8 UPGRADE A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalat
- CVE-2025-71214 HIGH 7.8 MITIGATE An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a l
- CVE-2025-71213 HIGH 7.8 UPGRADE An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate priv
- CVE-2025-71216 HIGH 7.8 MITIGATE A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow
- CVE-2025-71217 HIGH 7.8 MITIGATE An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism cou
- CVE-2025-71215 HIGH 7.0 MITIGATE A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature veri
- CVE-2026-45930 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are
FAQ
How do I fix Trend Micro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is Trend Micro being exploited right now?
Yes: 1 Trend Micro CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which Trend Micro CVE should I patch first?
CVE-2026-34926 currently ranks highest (73/100): Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability.
Newest Trend Micro CVEs
- CVE-2026-45930 MEDIUM 5.5 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our
- CVE-2026-34926 MEDIUM 6.7 2026-05-21: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
- CVE-2025-71217 HIGH 7.8 2026-05-21: An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-prot
- CVE-2025-71216 HIGH 7.8 2026-05-21: A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache me
- CVE-2025-71215 HIGH 7.0 2026-05-21: A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore se
Live from the NVD (last 120 days)
Loading…