Vulnerability · Published May 26, 2022 · Assigned by trendmicro
CVE-2022-30687
High 7.1
In plain English
A high-severity security flaw in Trend Micro Maximum Security from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS NVD)7.1High
Exploit odds (30 days)0.4%top 68.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Trend Micro Maximum Security 2022 is vulnerable to a link following vulnerability that could allow a low privileged local user to manipulate the product's secure erase feature to delete arbitrary files.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro Maximum Security | 2022 (17.7) |
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-11017 x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-22-789/ x_refsource_MISC