Trendmicro Endpoint Sensor vulnerabilities

3 vulnerabilities

Known vulnerabilities in Trendmicro Endpoint Sensor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7CVE-2018-6218trend microtrend micro user-mode hooking (umh) module+5
EPSS score
1.56%
A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.9.3CVE-2017-6798trendmicroendpoint_sensor
EPSS score
3.88%
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208.7CVE-2019-14688trendmicrocontrol_manager+7
EPSS score
1.87%
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.