How many CVEs does Trend Micro have?

Trend Micro has 684 published CVE records since 2000, including 61 in the last two years.

How many Trend Micro CVEs are in CISA KEV?

Yes — 12 of Trend Micro's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Trend Micro products have the most CVEs?

The Trend Micro products with the most published CVEs are apex_one, Trend Micro Apex One, officescan, Worry-Free Business Security, Trend Micro OfficeScan.

What are the most common weakness types in Trend Micro CVEs?

Trend Micro's CVEs most often map to these CWE weakness types: CWE-346 (Origin Validation Error), CWE-269 (Improper Privilege Management), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-427 (Uncontrolled Search Path Element).

How many critical Trend Micro vulnerabilities are there?

Trend Micro has 112 critical and 364 high-severity CVEs.

What is the average severity of Trend Micro CVEs?

The average CVSS base score across Trend Micro's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

684 CVEs

12 in CISA KEV

Trend Micro Vulnerabilities

Name: Trend Micro vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Trend Micro.

684

Total CVEs

Published

12

In CISA KEV

Exploited in the wild

113

Public exploits

PoC or exploit code

7.4

Avg CVSS

2000–2026

Overview

Trend Micro has 684 published CVE records since 2000, of which 12 are in CISA's Known Exploited Vulnerabilities catalog and 113 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Trend Micro products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Trend Micro's vulnerability posture, as a share of its 684 published CVEs.

Average CVSS: 7.4
Critical / high: 70%
Actively exploited (KEV): 2%
Public exploit available: 17%
Patch available: 29%

Severity and exploitation

How the CVSS severity of Trend Micro's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical112

High364

Medium200

Low8

In CISA’s Known Exploited Vulnerabilities catalog

12

12 of Trend Micro's CVEs are confirmed exploited in the wild.

Public exploits

113

113 of Trend Micro's CVEs have a known public exploit available.

Most affected products

The Trend Micro products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Trend Micro CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Trend Micro CVE records.

Disclosure activity by year

How many Trend Micro CVEs were published each year.

2019

27

2020

77

2021

73

2022

60

2023

44

2024

64

2025

42

2026

19

Latest Trend Micro CVEs

The most recently disclosed vulnerabilities affecting Trend Micro.

High vulnerability · 2026-05-21
CWE-367
High · CVSS 7.8
EPSS 0.3%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.2%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.2%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.2%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.2%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.2%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.2%2026-05-21
Medium vulnerability · 2026-05-21
CISA KEV
CWE-23
Medium · CVSS 6.7
EPSS 12.7%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.3%2026-05-21
High vulnerability · 2026-05-21
CWE-367
High · CVSS 7.8
EPSS 0.3%2026-05-21
High vulnerability · 2026-05-21
CWE-367
High · CVSS 7.0
EPSS 0.3%2026-05-21
High vulnerability · 2026-05-21
CWE-346
High · CVSS 7.8
EPSS 0.4%2026-05-21

Track new Trend Micro CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Trend Micro CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Wireshark748 CVEs WordPress739 CVEs Broadcom702 CVEs Novell675 CVEs UNISOC650 CVEs QNAP643 CVEs Moodle633 CVEs campcodes631 CVEs

Browse all vendors

Frequently asked questions

Common questions about Trend Micro vulnerabilities.

How many CVEs does Trend Micro have?: Trend Micro has 684 published CVE records since 2000, including 61 in the last two years.
How many Trend Micro CVEs are in CISA KEV?: Yes — 12 of Trend Micro's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Trend Micro products have the most CVEs?: The Trend Micro products with the most published CVEs are apex_one, Trend Micro Apex One, officescan, Worry-Free Business Security, Trend Micro OfficeScan.
What are the most common weakness types in Trend Micro CVEs?: Trend Micro's CVEs most often map to these CWE weakness types: CWE-346 (Origin Validation Error), CWE-269 (Improper Privilege Management), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-427 (Uncontrolled Search Path Element).
Are there public exploits for Trend Micro vulnerabilities?: Yes — 113 of Trend Micro's CVEs have a known public exploit.
How many critical Trend Micro vulnerabilities are there?: Trend Micro has 112 critical and 364 high-severity CVEs.
What is the average severity of Trend Micro CVEs?: The average CVSS base score across Trend Micro's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Trend Micro vulnerabilities

Monitor new Trend Micro vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing