Read the docs
TI-2024-15921 Aliases CVE-2024-23940GHSA-9fpx-vc83-vhpf

Uncontrolled search path in Trend Micro Security uiAirSupport

Priority HIGH 69CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-427.

Summary

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and ultimately escalate privileges on an affected system.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00636 50th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Trend Micro Security (Consumer) uiAirSupport (Trend Micro, Inc.): 6.0.2093

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Trend MicroTrend Micro Security (Consumer) uiAirSupport2023 (6.0) to before 6.0.20936.0.2093Patch availableCNA
  • Trend Micro Security (Consumer) uiAirSupport VendorTrend Micro Affected 2023 (6.0) to before 6.0.2093 Fixed in 6.0.2093 Patch available CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:trendmicro:air_support:*:*:*:*:*:*:*:*before 6.0.2103VulnerableTrendmicro
cpe:2.3:a:trendmicro:antivirus_\+_security:*:*:*:*:*:*:*:*before 6.0.2103VulnerableTrendmicro
cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*before 6.0.2103VulnerableTrendmicro
cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*before 6.0.2103VulnerableTrendmicro
cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*before 6.0.2103VulnerableTrendmicro
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:trendmicro:air_support:*:*:*:*:*:*:*:* Versions before 6.0.2103 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:antivirus_\+_security:*:*:*:*:*:*:*:* Versions before 6.0.2103 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:* Versions before 6.0.2103 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:* Versions before 6.0.2103 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:* Versions before 6.0.2103 Vulnerable ·Trendmicro
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

  • Fix · CNA Trend Micro Security (Consumer) uiAirSupport (Trend Micro, Inc.) Fixed in 6.0.2093

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-23940
  2. 2026-10-03 Alias added: GHSA-9fpx-vc83-vhpf
  3. 2026-10-25 EPSS moved to the 50th–90th percentile

References

Exploit 1

Advisory 2

  • TI-2025-34668 OS command injection in Trend Micro Apex One KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-10115 Insufficient verification of data authenticity in Trend Micro Apex Central KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-06895 Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-14867 Unrestricted file upload in Trend Micro Apex One KEVCVSS 3.1HIGH 8.8
  • TI-2020-06795 Injection in Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free… KEVCVSS 3.1HIGH 8.8
  • TI-2020-06794 A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a… KEVCVSS 3.1HIGH 8.8
See all 603 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences