CVE-2020-8468: Trend Micro Multiple Products Content Validation Escape Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 6.2% chance of exploitation in the next 30 days.

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.

Affected products

• Trend Micro Apex One: version 2019 only
• Trend Micro OfficeScan: version xg only
• Trend Micro Worry-Free Business Security: version 9.0 only; version 9.5 only; version 10.0 only

Published 2020-03-18. Last modified 2026-06-17.