CVE-2024-23940
High
Description
Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and ultimately escalate privileges on an affected system.
SeverityHigh
CVSS7.8
Exploit probability—
ProductTrendmicro Air Support
PublishedJan 29, 2024
First seenJan 29, 2024
Weakness typeCWE-427CWE-427
How to fix
Update
- trendmicro air_support6.0.2103 or later
- trendmicro antivirus_\+_security6.0.2103 or later
- trendmicro internet_security6.0.2103 or later
- trendmicro maximum_security6.0.2103 or later
- trendmicro premium_security6.0.2103 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro air_support | v < 6.0.2103 | 6.0.2103 |
| trendmicro antivirus_\+_security | v < 6.0.2103 | 6.0.2103 |
| trendmicro internet_security | v < 6.0.2103 | 6.0.2103 |
| trendmicro maximum_security | v < 6.0.2103 | 6.0.2103 |
| trendmicro premium_security | v < 6.0.2103 | 6.0.2103 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.