Vulnerabilities > Trendmicro > Internet Security > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-02-05 CVE-2018-18333 Untrusted Search Path vulnerability in Trendmicro products
A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations.
6.8
2018-05-25 CVE-2018-6236 Race Condition vulnerability in Trendmicro products
A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver.
6.9
2016-06-19 CVE-2016-1226 Cross-site Scripting vulnerability in Trendmicro Internet Security 10.0/8.0
Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
trendmicro CWE-79
4.3
2016-06-19 CVE-2016-1225 Information Exposure vulnerability in Trendmicro Internet Security 10.0/8.0
Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors.
network
low complexity
trendmicro CWE-200
5.0