CVE-2022-26319: Medium severity trend micro portable security vulnerability
An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges. Please note: an attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-26319?
CVE-2022-26319 is an installer search patch element vulnerability in Trend Micro Portable Security that could allow a local attacker to elevate local privileges.
How does CVE-2022-26319 affect Trend Micro Portable Security?
CVE-2022-26319 affects Trend Micro Portable Security versions 2.0 and 3.0, including the Pro version.
What is the severity of CVE-2022-26319?
The severity of CVE-2022-26319 is medium, with a CVSS score of 6.5.
How can an attacker exploit CVE-2022-26319?
An attacker can exploit CVE-2022-26319 by placing a malicious DLL file in an installer folder.
Is there a fix available for CVE-2022-26319?
Yes, Trend Micro has released a fix for CVE-2022-26319. Please refer to the official advisory for more information.