Research org contributor

Trend Micro

cited as evidence in 61 · CNA assigner on 12 of 73 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

trendmicro.com ↗ · home of the cited advisories

records cited in

deterministic count

finder / reporter credits

CVE.org credits

CVE records catalogued (CNA)

assigner

61%

avg modeled exploit prob.

FIRST EPSS, 73/73

25%

ransomware-associated

18 of 73 · CISA flag

Known for

— recomputed from this contributor’s own records

SurfacesApplication / other (31), Operating system / kernel (13), Edge / remote-access infra (11), Browser (9), Server / web platform (7)

WeaknessMemory safety (20), Injection (17), Path traversal / file (6), Authorization / access control (5), Web / client (2)

PortfolioMicrosoft (15), Trend Micro (12), Google (8), Apache (4), Accellion (4), Adobe (3)

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out

1Front door

73reach this stage

→

2Keys to the kingdom

73reach this stage

→

3Lateral reach

68reach this stage

→

4Data at risk

6reach this stage

→

5Lights out

2reach this stage

Furthest any of these records carries an attacker: 5 · Lights out. 6 of 73 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

Recent highlights

— this contributor’s newest known-exploited records

CVE-2026-34926Trend Micro1%KEV CVE-2008-4250Microsoft99%KEV CVE-2021-22555Linux79%KEV CVE-2025-4008Smartbedded94%KEV CVE-2025-54948Trend Micro20%KEV CVE-2019-9621Synacor81%KEV

Every record they’re cited in

— all 73, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

CVE-2022-29464WSO2100%RWKEV CVE-2017-5638Apache100%RWKEV CVE-2021-42013Apache100%RWKEV CVE-2018-10562Dasan100%RWKEV CVE-2017-11882Microsoft100%RWKEV CVE-2017-12615Apache100%RWKEV CVE-2017-0144Microsoft99%RWKEV CVE-2024-21412Microsoft95%RWKEV CVE-2024-6670Progress95%RWKEV CVE-2018-8174Microsoft88%RWKEV CVE-2024-30088Microsoft68%RWKEV CVE-2023-28461Array Networks 68%RWKEV CVE-2021-27104Accellion57%RWKEV CVE-2018-13374Fortinet38%RWKEV CVE-2021-27103Accellion11%RWKEV CVE-2017-1000253Linux11%RWKEV CVE-2021-27101Accellion6%RWKEV CVE-2021-27102Accellion4%RWKEV CVE-2014-6271GNU100%KEV CVE-2021-40438Apache100%KEV CVE-2020-9054Zyxel100%KEV CVE-2015-1427Elastic100%KEV CVE-2017-7269Microsoft100%KEV CVE-2016-6277NETGEAR100%KEV CVE-2022-22965VMware100%KEV CVE-2015-5119Adobe99%KEV CVE-2014-6287Rejetto99%KEV CVE-2020-0618Microsoft99%KEV CVE-2008-4250Microsoft99%KEV CVE-2020-14883Oracle98%KEV CVE-2024-56145Craft CMS97%KEV CVE-2015-2051D-Link97%KEV CVE-2017-3506Oracle96%KEV CVE-2025-4008Smartbedded94%KEV CVE-2015-5122Adobe94%KEV CVE-2010-2568Microsoft91%KEV CVE-2017-5521NETGEAR89%KEV CVE-2023-36025Microsoft88%KEV CVE-2015-2426Microsoft87%KEV CVE-2018-17463Google84%KEV CVE-2014-4114Microsoft82%KEV CVE-2019-9621Synacor81%KEV CVE-2020-6418Google79%KEV CVE-2021-22555Linux79%KEV CVE-2023-4911GNU79%KEV CVE-2019-2215Android72%KEV CVE-2025-04117-Zip66%KEV CVE-2018-6065Google59%KEV CVE-2020-1054Microsoft53%KEV CVE-2016-1646Google45%KEV CVE-2015-2425Microsoft45%KEV CVE-2017-5030Google42%KEV CVE-2015-2387Microsoft37%KEV CVE-2016-5198Google35%KEV CVE-2018-17480Google34%KEV CVE-2017-5070Google31%KEV CVE-2019-18187Trend Micro25%KEV CVE-2025-54948Trend Micro20%KEV CVE-2022-26871Trend Micro20%KEV CVE-2015-5123Adobe18%KEV CVE-2022-22948VMware14%KEV CVE-2019-3010Oracle14%KEV CVE-2020-8599Trend Micro12%KEV CVE-2020-8467Trend Micro11%KEV CVE-2020-8468Trend Micro6%KEV CVE-2021-36741Trend Micro5%KEV CVE-2023-41179Trend Micro5%KEV CVE-2023-45727North Grid4%KEV CVE-2011-4723D-Link3%KEV CVE-2022-40139Trend Micro3%KEV CVE-2020-24557Trend Micro3%KEV CVE-2021-36742Trend Micro1%KEV CVE-2026-34926Trend Micro1%KEV

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

Cited in 73 known-exploited records — the list below; every one links to its public source.

Catalogued 12 CVE record(s) as the CNA assigner (from CVE.org).

Coverage gaps — stated, not hidden

This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.

The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.