CVEvulnerability

CVE-2022-28394

7.8 HIGH Published 2022-05-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-427

Description

EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Please note that this was reported on an EOL version of the product, and users are advised to upgrade to the latest supported version (5.x).

Affected configurations

• trendmicro password manager (< 3.7.0.1223)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References