Trendmicro
Trendmicro Internet Security: vulnerabilidades y CVE
Trendmicro Internet Security tiene 17 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE17
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-23940 | Alta (7.8) | 0.64% | — | 29 ene 2024 | Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an… |
| CVE-2021-43772 | Media (5.5) | 0.21% | — | 3 dic 2021 | Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection. |
| CVE-2018-18333 | Alta (7.8) | 1.8% | — | 5 feb 2019 | A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations. |
| CVE-2018-15363 | Alta (7.8) | 0.47% | — | 30 ago 2018 | An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain… |
| CVE-2018-10514 | Alta (7.8) | 0.41% | — | 30 ago 2018 | A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain… |
| CVE-2018-10513 | Alta (7.8) | 0.76% | — | 30 ago 2018 | A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must… |
| CVE-2018-3608 | Crítica (9.8) | 3.4% | — | 6 jul 2018 | A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable… |
| CVE-2018-6236 | Alta (7) | 0.30% | — | 25 may 2018 | A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within… |
| CVE-2018-6235 | Alta (7.8) | 0.47% | — | 25 may 2018 | An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing… |
| CVE-2018-6234 | Media (5.5) | 0.69% | — | 25 may 2018 | An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within… |
| CVE-2018-6233 | Alta (7.8) | 0.50% | — | 25 may 2018 | A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of… |
| CVE-2018-6232 | Alta (7.8) | 0.50% | — | 25 may 2018 | A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of… |
| CVE-2017-5565 | Media (6.7) | 0.70% | — | 21 mar 2017 | Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlier) allows a local attacker to bypass a self-protection… |
| CVE-2016-1226 | Media (6.1) | 1.6% | — | 19 jun 2016 | Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2016-1225 | Media (6.5) | 3.5% | — | 19 jun 2016 | Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors. |
| CVE-2010-3189 | Alta (9.3) | 39% | — | 31 ago 2010 | The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced… |
| CVE-2009-0686 | Alta (7.2) | 0.80% | — | 1 abr 2009 | The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER… |