What’s Vulnerable › Vulnerabilities

CVE-2021-32466

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-29 · updated 2026-06-17
• Weakness: CWE-427

Description

An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

Affected products

• Trend Micro HouseCall for Home Networks: through 5.3.1225

References

• https://helpcenter.trendmicro.com/en-us/article/tmka-10626
• https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621
• https://www.zerodayinitiative.com/advisories/ZDI-21-1112/
• https://helpcenter.trendmicro.com/en-us/article/tmka-10626
• https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621
• https://www.zerodayinitiative.com/advisories/ZDI-21-1112/

Get alerted when CVE-2021-32466 or the next vulnerability affects your stack