CVE-2020-8467

ENISA EUVD: EUVD-2020-29333 ↗

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 1 article

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

31.11%

probability

This CVE has a 31.11% probability of being exploited in the next 30 days.

0% Top 96.8th percentile of all CVEs 100%

CVSS v3.1

Source: NVD

8.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Project Zero

Unspecified vulnerability in a migration tool component

Affected Products

Google Project Zero

Patched

March 16, 2020

Reported by

Trend Micro Research

Root Cause Analysis

???

Security Advisory 2020-016

CERT-EU Mar 18, 2020

Signal Intelligence

Confidenceⓘ

82%

EPSS 31.11%

CVSS v3.1 8.8

Mentions 1

Last Seen Mar 18, 2020

CNA Information

Analyst Note

This RCE vulnerability in Trend Micro Apex One and OfficeScan XG is confirmed with a high CVSS score (8.8) and validation by Google Project Zero. While it requires user authentication and lacks CISA KEV listing, the official vendor description and CERT-EU advisory provide sufficient evidence to support the confirmed status.

Triage Info

Decided atMar 03, 2026