CVE-2021-31519

CVE-2021-31519 concerns Trend Micro HouseCall for Home Networks, affected through version 5.3.1179 and earlier. The root cause is incorrect permissions on product installer folders, permitting an attacker who can run low-privileged code to place arbitrary code in a folder that could be executed b...

CVE-2021-32466

CVE-2021-32466 affects Trend Micro HouseCall for Home Networks (versions 5.3.1225 and earlier). The vulnerability arises from an uncontrolled search path element that allows loading a malicious library when a crafted file is placed in a specific directory. An attacker must already have low-privil...

CVE-2022-28339

CVE-2022-28339 affects Trend Micro HouseCall for Home Networks, specifically versions 5.3.1302 and earlier. The vulnerability is an uncontrolled search path/patch element issue that can allow a local attacker with low privileges to cause the installer to load a malicious DLL, resulting in privile...

CVE-2021-28649

CVE-2021-28649 affects Trend Micro HouseCall for Home Networks (versions 5.3.1179 and earlier). The issue is an incorrect permission setting in the product installer folders created during installation, enabling a local attacker who can run low-privilege code to place arbitrary code in a folder t...

CVE-2019-19689

Trend Micro HouseCall for Home Networks is affected by a DLL hijacking vulnerability associated with the packer used by the product. Affected versions are below 5.3.0.1063. The issue enables local exploitation through hijacking a DLL loading path, per the CVE-2019-19689 entries in NVD and related...

CVE-2019-19688

The CVE-2019-19688 entry concerns Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063). Connected sources confirm a local privilege escalation vulnerability in which an attacker can place a malicious DLL into the application directory to elevate privileges. Affected component: the ...

CVE-2021-25247

Affected product: Trend Micro HouseCall for Home Networks (Windows Edition). Vulnerability: DLL hijacking/unsafe DLL loading due to DLL search path handling, enabling an attacker who already has local user privileges to escalate privileges and execute arbitrary code via a malicious DLL. Root caus...