CVE-2018-3608

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-06 · updated 2026-06-17
Weakness: CWE-94

Description

A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.

Affected products

Trendmicro Antivirus + Security: through 12.0.1191
Trendmicro Internet Security: through 12.0.1191
Trendmicro Maximum Security: through 12.0.1191
Trend Micro OfficeScan: 11.0, 12.0
Trendmicro Officescan Monthly: 11.0, 12.0
Trendmicro Premium Security: through 12.0.1191

References

http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120237.aspx
http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120237.aspx

Get alerted when CVE-2018-3608 or the next vulnerability affects your stack