CVEvulnerability

CVE-2023-28929

7.8 HIGH Published 2023-06-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-427

Description

Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started.

Affected configurations

• trendmicro antivirus\+ security 2021 (<= 17.0.1412) • trendmicro internet security 2021 (<= 17.0.1412) • trendmicro maximum security 2021 (<= 17.0.1412) • trendmicro premium security 2021 (<= 17.0.1412) • trendmicro antivirus\+ security 2022 (<= 17.7.1476) • trendmicro internet security 2022 (<= 17.7.1476) • trendmicro maximum security 2022 (<= 17.7.1476) • trendmicro premium security 2022 (<= 17.7.1476) • trendmicro antivirus\+ security 2023 (<= 17.7.1476) • trendmicro internet security 2023 (<= 17.7.1476) • trendmicro maximum security 2023 (<= 17.7.1476) • trendmicro premium security 2023 (<= 17.7.1476)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References