CVE-2019-9492

A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authentication and have local access to the vulnerable system.

• CWE-426

• https://success.trendmicro.com/solution/1123045Patch, Vendor Advisory
• https://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-can-it-protect-itselfThird Party Advisory
• https://success.trendmicro.com/solution/1123045Patch, Vendor Advisory
• https://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-can-it-protect-itselfThird Party Advisory

Published

Jul 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9485An issue was discovered in GitLab Community and Enterprise E…
• CVE-2019-9486STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers fr…
• CVE-2019-9488Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerabi…4.9
• CVE-2019-9489A directory traversal vulnerability in Trend Micro Apex One,…
• CVE-2019-9490A vulnerability in Trend Micro InterScan Web Security Virtua…
• CVE-2019-9491Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 …7.8
• CVE-2019-9493The MyCar Controls of AutoMobility Distribution Inc., mobile…9.8
• CVE-2019-9494The implementations of SAE in hostapd and wpa_supplicant are…5.9
• CVE-2019-9495The implementations of EAP-PWD in hostapd and wpa_supplicant…3.7
• CVE-2019-9496An invalid authentication sequence could result in the hosta…
• CVE-2019-9497The implementations of EAP-PWD in hostapd EAP Server and wpa…
• CVE-2019-9498The implementations of EAP-PWD in hostapd EAP Server, when b…8.1