What is CVE-2022-28394?

CVE-2022-28394 is a high-severity vulnerability in Trend Micro Password Manager, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2022-05-27.

How severe is CVE-2022-28394?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Trend Micro Password Manager

CVE-2022-28394

EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Librari…

EPSS: 0.003 (17.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Trend Micro Password Manager — versions 3.7.0.1223 and below
Trendmicro Password_manager

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

security@trendmicro.com (x_refsource_MISC, Vendor Advisory)
security@trendmicro.com (Third Party Advisory, x_refsource_MISC)
security@trendmicro.com (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-28394?: CVE-2022-28394 is a high-severity vulnerability in Trend Micro Password Manager, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2022-05-27.
How severe is CVE-2022-28394?: High severity. CVSS v3 base score is 7.8 out of 10.