CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 6:40 AM ET)

What this means for you

This week: 3,089 CVEs published, 232 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,089; Show in the list
Critical, last 7 days: 232; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product trendmicro:apexone_saas. Show all products

12 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-45208	High 7.8	A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2026-45207	High 7.8	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2026-45206	High 7.8	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2026-34930	High 7.8	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2026-34929	High 7.8	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2026-34928	High 7.8	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2026-34927	High 7.8	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2026-34926 Known exploited	Medium 6.7	A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents… Assigned by trendmicro	May 21, 2026
CVE-2025-71213	High 7.8	An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026
CVE-2025-71212	High 7.8	A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Assigned by trendmicro	May 21, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.