CVE-2024-23940

Trend Micro uiAirSupport (Trend Micro Security 2023 family) is affected for version 6.0.2092 and below. The vulnerability is described as a DLL hijacking/proxying issue that could let an attacker impersonate/modify a library, run code on the system, and escalate privileges. Impact is described as...

CVE-2018-10514

CVE-2018-10514 affects Trend Micro Security 2018 (Consumer) products. The vulnerability arises from the coreServiceShell service failing to properly impersonate the client before performing sensitive operations, enabling a local attacker who can run low-privilege code to escalate privileges (to S...

CVE-2018-3608

CVE-2018-3608 affects Trend Micro Maximum Security (Consumer) for 2018, specifically affected versions 12.0.1191 and below. The vulnerability resides in the User-Mode Hooking (UMH) driver and could allow a crafted network packet to cause code to be injected into other processes on a vulnerable sy...

CVE-2018-10513

The connected ZDI advisory ZDI-18-961 details a local privilege‑escalation vulnerability in Trend Micro products (e.g., Trend Micro Maximum Security) involving deserialization of untrusted data in ID_AMSP_MASTER requests. The flaw occurs in the coreServiceShell.exe service process when parsing re...

CVE-2018-18333

Summary (CVE-2018-18333) : A DLL hijacking vulnerability affects Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below. The issue allows an attacker to manipulate a specific DLL, resulting in privilege escalation on vulnerable installations. The existing sources describe the a...

CVE-2018-15363

An advisory for CVE-2018-15363 describes an Out-of-Bounds Read Privilege Escalation in Trend Micro Security 2018 (Consumer) products. The vulnerability stems from lack of proper validation of user-supplied data in coreServiceShell.exe (ID_AMSP_MASTER path) processing of request ID 0x2002, allowin...