Trend Micro Maximum Security vulnerabilities

13 CVEs affecting Trend Micro Maximum Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-23940, published 2024-01-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3608, published 2018-07-06. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could…
CVE-2018-18333, published 2019-02-05. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable…
CVE-2018-10513, published 2018-08-30. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable…
CVE-2017-5565, published 2017-03-21. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlier) allows a local attacker to bypass a…
CVE-2018-6234, published 2018-05-25. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to disclose sensitive information on vulnerable installations…
CVE-2024-23940, published 2024-01-29. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited…
CVE-2018-6233, published 2018-05-25. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw…
CVE-2018-6232, published 2018-05-25. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw…
CVE-2018-15363, published 2018-08-30. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker…
CVE-2018-6235, published 2018-05-25. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw…

Latest

CVE-2021-43772, published 2021-12-03. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection.
CVE-2018-10514, published 2018-08-30. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An…
CVE-2018-6236, published 2018-05-25. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a…