1. Home
  2. CVE Database
  3. CVE-2023-28929
HIGH · 7.8

CVE-2023-28929

Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence ...

Vulnerability Description

Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TrendmicroAntivirus\+ Security 2021<= 17.0.1412
TrendmicroInternet Security 2021<= 17.0.1412
TrendmicroMaximum Security 2021<= 17.0.1412
TrendmicroPremium Security 2021<= 17.0.1412
MicrosoftWindows-
TrendmicroAntivirus\+ Security 2022<= 17.7.1476
TrendmicroInternet Security 2022<= 17.7.1476
TrendmicroMaximum Security 2022<= 17.7.1476
TrendmicroPremium Security 2022<= 17.7.1476
TrendmicroAntivirus\+ Security 2023<= 17.7.1476
TrendmicroInternet Security 2023<= 17.7.1476
TrendmicroMaximum Security 2023<= 17.7.1476
TrendmicroPremium Security 2023<= 17.7.1476

Related Weaknesses (CWE)

CWE-427

References

FAQ

What is CVE-2023-28929?

CVE-2023-28929 is a vulnerability with a CVSS score of 7.8 (HIGH). Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence ...

How severe is CVE-2023-28929?

CVE-2023-28929 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-28929?

Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Antivirus\+ Security 2021, Trendmicro Internet Security 2021, Trendmicro Maximum Security 2021, Trendmicro Premium Security 2021, Microsoft Windows.