CVE-2022-26337

—

CVSS 3.1

7.8 high

EPSS

<1%p50

Published

Mar 8, 2022 (Mar 8, 2022)

Modified

Jun 17, 2026

Description

Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine.

Vendors: trendmicro
Products: password manager
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.