CVE-2019-14688

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.

• CWE-427

• https://success.trendmicro.com/solution/1123562Vendor Advisory
• https://success.trendmicro.com/solution/1123562Vendor Advisory

Published

Feb 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14682The acf-better-search (aka ACF: Better Search) plugin before…
• CVE-2019-14683The codection "Import users from CSV with meta" plugin befor…5.7
• CVE-2019-14684A DLL hijacking vulnerability exists in Trend Micro Password…
• CVE-2019-14685A local privilege escalation vulnerability exists in Trend M…
• CVE-2019-14686A DLL hijacking vulnerability exists in the Trend Micro Secu…
• CVE-2019-14687A DLL hijacking vulnerability exists in Trend Micro Password…
• CVE-2019-1469An information disclosure vulnerability exists when the win3…5.5
• CVE-2019-14690AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlay…8.8
• CVE-2019-14691AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader:…8.8
• CVE-2019-14692AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer:…8.8
• CVE-2019-14693Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XM…8.5
• CVE-2019-14694A use-after-free flaw in the sandbox container implemented i…