Are antivirus tools (Trend Micro, Symantec, ESET and others) safe right now?
No antivirus tool flaws have been added to CISA's exploited list in the last 90 days (the most recent was May 21, 2026). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Zero-day
- Trend Micro Apex One OS Command Injection Vulnerability
- Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Zero-day
- Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Zero-day
- Trend Micro Apex Central Arbitrary File Upload Vulnerability Zero-day
- Trend Micro Multiple Products Improper Input Validation Vulnerability
- Trend Micro Multiple Products Improper Input Validation Vulnerability
- McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
- Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
- Trend Micro Multiple Products Content Validation Escape Vulnerability
- Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
- Trend Micro Multiple Products Improper Access Control Vulnerability
- Trend Micro OfficeScan Directory Traversal Vulnerability
- Symantec Messaging Gateway Remote Code Execution Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 1 | 1 |
| 2025 | 1 | 0 |
| 2024 | 0 | 0 |
| 2023 | 1 | 1 |
| 2022 | 2 | 2 |
Questions
Are antivirus tools (Trend Micro, Symantec, ESET and others) safe right now?
No antivirus tool flaws have been added to CISA's exploited list in the last 90 days (the most recent was May 21, 2026). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many antivirus tools vulnerabilities have been exploited?
14 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks.
Covers products matching trend micro, apex one, symantec, mcafee, eset nod, eset endpoint and more. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.