Trend Micro uiAirSupport Vulnerable to DLL Hijacking/Proxying
CVE-2024-23940
7.8HIGH
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 29 January 2024
What is CVE-2024-23940?
The DLL hijacking vulnerability in Trend Micro uiAirSupport affects versions 6.0.2092 and earlier, allowing an attacker to exploit the system by impersonating and manipulating a library. This exploitation could lead to unauthorized code execution within the affected product, potentially enabling privilege escalation on the user’s system. Users of Trend Micro Security 2023 should remain vigilant about this security issue and apply relevant updates or patches as they become available to mitigate the associated risks.
Affected Version(s)
Trend Micro Security (Consumer) uiAirSupport 2023 (6.0) < 6.0.2093