What’s Vulnerable › Vulnerabilities

CVE-2018-18333

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-02-05 · updated 2026-06-17
• Weakness: CWE-426

Description

A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations.

Affected products

• Trendmicro Antivirus + Security: before 15.0.0.1163 — fixed in 15.0.0.1163
• Trendmicro Internet Security: before 15.0.0.1163 — fixed in 15.0.0.1163
• Trendmicro Maximum Security: before 15.0.0.1163 — fixed in 15.0.0.1163
• Trendmicro Premium Security: before 15.0.0.1163 — fixed in 15.0.0.1163

How to fix

Upgrade to a fixed version: Trendmicro Antivirus + Security 15.0.0.1163; Trendmicro Internet Security 15.0.0.1163; Trendmicro Maximum Security 15.0.0.1163; Trendmicro Premium Security 15.0.0.1163. Check the vendor advisory for mitigations.

References

• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121932.aspx
• https://gaissecurity.com/yazi/discovery-of-dll-hijack-on-trend-micro-antivirusplus-cve-2018-18333
• https://kaganisildak.com/2019/01/17/discovery-of-dll-hijack-on-trend-micro-antivirus-cve-2018-18333/
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121932.aspx
• https://gaissecurity.com/yazi/discovery-of-dll-hijack-on-trend-micro-antivirusplus-cve-2018-18333
• https://kaganisildak.com/2019/01/17/discovery-of-dll-hijack-on-trend-micro-antivirus-cve-2018-18333/

Get alerted when CVE-2018-18333 or the next vulnerability affects your stack