CVE-2018-6218 Other in Trend Micro User-Mode Hooking (UMH) Module

What is CVE-2018-6218?

CVE-2018-6218 is a high-severity vulnerability in Trendmicro Officescan, published on 16 Feb 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.

Weakness: CWE-426

Which versions are affected by CVE-2018-6218?

It affects 5 products.

Products include Trendmicro Deep Security, Trendmicro Endpoint Sensor, Trendmicro Officescan, Trendmicro Security, Trendmicro Worry-Free Business Security.

How do I fix CVE-2018-6218?

No fix has been published for CVE-2018-6218 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-6218 being exploited?

There is no known exploitation of CVE-2018-6218 in the wild and no public exploit code.

Other vulnerabilities in Trendmicro Officescan

• CVE-2023-52337 Privilege escalation in Trend Micro Deep Security Agent High 7.8
• CVE-2023-52338 Privilege escalation in Trend Micro Deep Security Agent High 7.8
• CVE-2019-15626 Information disclosure in Deep Security Manager High 7.5
• CVE-2019-15627 Path traversal in Deep Security Agent High 7.1

All Trendmicro Officescan vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5h87-5cj8-gq98.