DLL Hijacking Vulnerability in Trend Micro Password Manager for Windows
CVE-2020-8469

7.8HIGH

Key Information:

Vendor

Trend Micro
Status
Trend Micro Password Manager For Windows
Vendor
CVE Published:
12 March 2020

What is CVE-2020-8469?

The Trend Micro Password Manager for Windows version 5.0 is affected by a security vulnerability that allows attackers to exploit DLL hijacking. This may enable unauthorized privilege escalation, posing risks to users and the overall security of their systems. Prompt updates and protective measures are recommended to mitigate the impact of this vulnerability.

Affected Version(s)

Trend Micro Password Manager for Windows 5.0

References

https://esupport.trendmicro.com/en-us/home/pages/technica...
x_refsource_MISC
http://seclists.org/fulldisclosure/2020/Jun/30
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.