CVE-2022-26337: Critical severity trend micro password manager vulnerability

Q: What is the severity of CVE-2022-26337?

CVE-2022-26337 is classified as a high severity vulnerability due to its potential to escalate local privileges.

Q: How do I fix CVE-2022-26337?

To mitigate CVE-2022-26337, upgrade Trend Micro Password Manager to version 5.0.0.1267 or later.

Q: What type of vulnerability is CVE-2022-26337?

CVE-2022-26337 is categorized as an Uncontrolled Search Path Element vulnerability.

Q: Which versions of Trend Micro Password Manager are affected by CVE-2022-26337?

CVE-2022-26337 affects Trend Micro Password Manager installer version 5.0.0.1262 and below.

Q: What could an attacker achieve by exploiting CVE-2022-26337?

An attacker could exploit CVE-2022-26337 to escalate local privileges on the affected machine.

Published Mar 8, 2022

Updated

Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine.

Affected Software

1 affected component

trendmicro Password Manager Windows<5.0.0.1266

Remediation

Patch Available

https://helpcenter.trendmicro.com/en-us/article/tmka-10954

Event History

Mar 8, 2022

CVE Published

via MITRE·09:55 PM

Data Sourced

via MITRE·09:55 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-26337?

CVE-2022-26337 is classified as a high severity vulnerability due to its potential to escalate local privileges.

How do I fix CVE-2022-26337?

To mitigate CVE-2022-26337, upgrade Trend Micro Password Manager to version 5.0.0.1267 or later.

What type of vulnerability is CVE-2022-26337?