CVE-2020-8598: Trend Micro Apex One

Critical severity, CVSS 9.8. EPSS: 13.2% chance of exploitation in the next 30 days.

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

Affected products

• Trend Micro Apex One: version 2019 only
• Trend Micro OfficeScan: version xg only
• Trend Micro Worry-Free Business Security: version 9.0 only; version 9.5 only; version 10.0 only

Published 2020-03-18. Last modified 2026-06-17.