CVE-2018-18333

Description

A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations.

Weakness classification

• CWE-426: Untrusted Search Path

Primary references

• security@trendmicro.com — Exploit, Vendor Advisory
• security@trendmicro.com — Exploit, Third Party Advisory
• security@trendmicro.com — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory