HIGH🇵🇱 Wersja polska

CVE-2022-26337

CVSS 7.8v3.1pub. 2022-03-08upd. 2024-11-21

Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Trendmicro Password Manager

    APP
    Trendmicro
    < 5.0.0.1266
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2016-3987CRITICAL9.8PL ✓same product

RCE w Trend Micro Password Manager poprzez parametr URL w serwerze HTTP

CVE-2025-52837HIGH7.8same product

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privile...

CVE-2022-28394HIGH7.8same product

EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided ...

CVE-2022-30523HIGH7.8same product

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privile...

CVE-2021-32461HIGH7.8same product

Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Pr...