What’s Vulnerable › Vulnerabilities

CVE-2023-28929

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-26 · updated 2026-06-17
• Weakness: CWE-427

Description

Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started.

Affected products

• Trendmicro Antivirus+ Security 2021: through 17.0.1412
• Trendmicro Antivirus+ Security 2022: through 17.7.1476
• Trendmicro Antivirus+ Security 2023: through 17.7.1476
• Trendmicro Internet Security 2021: through 17.0.1412
• Trendmicro Internet Security 2022: through 17.7.1476
• Trendmicro Internet Security 2023: through 17.7.1476
• Trend Micro Maxmium Security (Consumer): through 17.0.1412
• Trend Micro Maximum Security: through 17.7.1476
• Trendmicro Maximum Security 2023: through 17.7.1476
• Trendmicro Premium Security 2021: through 17.0.1412
• Trendmicro Premium Security 2022: through 17.7.1476
• Trendmicro Premium Security 2023: through 17.7.1476

References

• https://helpcenter.trendmicro.com/en-us/article/tmka-19062
• https://helpcenter.trendmicro.com/en-us/article/tmka-19062

Get alerted when CVE-2023-28929 or the next vulnerability affects your stack