CVE-2022-40139
Trend Micro Apex One and Apex One as a Service
Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
What it is
Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- success.trendmicro.com/dcx/s/solution/000291528?language=en_US
- nvd.nist.gov/vuln/detail/CVE-2022-40139
Description and required action as published by CISA. Full record at NVD.
Other Trend Micro entries on the list
- Apex One Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability CVE-2026-34926 · May 21, 2026
- Apex One Trend Micro Apex One OS Command Injection Vulnerability CVE-2025-54948 · Aug 18, 2025
- Apex One and Worry-Free Business Security Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability CVE-2023-41179 · Sep 21, 2023
- Apex Central Trend Micro Apex Central Arbitrary File Upload Vulnerability CVE-2022-26871 · Mar 31, 2022
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36742 · Nov 3, 2021
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36741 · Nov 3, 2021