CVE-2021-32466

An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

• CWE-427
• CWE-427

• https://helpcenter.trendmicro.com/en-us/article/tmka-10626Vendor Advisory
• https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621Patch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-1112/Third Party Advisory, VDB Entry
• https://helpcenter.trendmicro.com/en-us/article/tmka-10626Vendor Advisory
• https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621Patch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-1112/Third Party Advisory, VDB Entry

Published

Sep 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32460The Trend Micro Maximum Security 2021 (v17) consumer product…7.8
• CVE-2021-32461Trend Micro Password Manager (Consumer) version 5.0.0.1217 a…7.8
• CVE-2021-32462Trend Micro Password Manager (Consumer) version 5.0.0.1217 a…8.8
• CVE-2021-32463An incorrect permission assignment denial-of-service vulnera…7.8
• CVE-2021-32464An incorrect permission assignment privilege escalation vuln…7.8
• CVE-2021-32465An incorrect permission preservation vulnerability in Trend …8.8
• CVE-2021-32467MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-32468MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-32469MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-32470Craft CMS before 3.6.13 has an XSS vulnerability.6.1
• CVE-2021-32471Insufficient input validation in the Marvin Minsky 1967 impl…7.8
• CVE-2021-32472Teachers exporting a forum in CSV format could receive a CSV…4.3