High severity7.8NVD Advisory· Published Jan 29, 2024· Updated Jun 17, 2026

CVE-2024-23940

Description

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and ultimately escalate privileges on an affected system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Air Support
cpe:2.3:a:trendmicro:air_support:*:*:*:*:*:*:*:*
Range: <6.0.2103
Trend Micro/Antivirus \+ Security
cpe:2.3:a:trendmicro:antivirus_\+_security:*:*:*:*:*:*:*:*
Range: <6.0.2103
Trend Micro/Internet Security
cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*
Range: <6.0.2103
Trend Micro/Maximum Security
cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*
Range: <6.0.2103
Trend Micro/Premium Security
cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*
Range: <6.0.2103
Trend Micro/uiAirSupportllm-create
Range: <=6.0.2092
Trend Micro, Inc./Trend Micro Security (Consumer) uiAirSupportv5
Range: 2023 (6.0)

Patches

Vulnerability mechanics

References

medium.com/@s1kr10s/av-when-a-friend-becomes-an-enemy-55f41aba42b1nvdExploitTechnical DescriptionThird Party Advisory
helpcenter.trendmicro.com/en-us/article/tmka-12134nvdVendor Advisory
helpcenter.trendmicro.com/ja-jp/article/tmka-12132nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000