CVE-2022-30703

7.8HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Security (consumer)
Vendor
CVE Published:
9 June 2022

Summary

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This vulnerability could also potentially be chained for privilege escalation.

Affected Version(s)

Trend Micro Security (Consumer) 2022 (17.7.1383 and below)

References

https://helpcenter.trendmicro.com/en-us/article/tmka-11021
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-801/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.