Vulnerability in Microsoft Windows
CVE-2022-30703
Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This vulnerability could also potentially be chained for privilege escalation.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (24.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 25th percentile — 24.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Microsoft Windows
- Trend Micro Security (Consumer) — versions 2022 (17.7.1383 and below)
- Trendmicro Security — versions 2021, 2022
References
- helpcenter.trendmicro.com/en-us/article/tmka-11021 (Vendor Advisory)
- www.zerodayinitiative.com/advisories/ZDI-22-801/ (VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-30703?
- CVE-2022-30703 is a high-severity vulnerability in Microsoft Windows. CVSS score: 7.8/10. Published 2022-06-09.
- How severe is CVE-2022-30703?
- High severity. CVSS v3 base score is 7.8 out of 10.