Vulnerability · Published Mar 8, 2022 · Assigned by trendmicro
CVE-2022-26337
High 7.8
In plain English
A high-severity security flaw in Trend Micro Password Manager from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.7%top 47.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro Password Manager | 5.0.0.1262 and below |
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-10954 x_refsource_MISC