CVE-2020-8470: Trend Micro Apex One

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

Affected products

• Trend Micro Apex One: version 2019 only
• Trend Micro OfficeScan: version xg only
• Trend Micro Worry-Free Business Security: version 9.0 only; version 9.5 only; version 10.0 only

Published 2020-03-18. Last modified 2026-06-17.