Exposed Dangerous Method Vulnerability in Trend Micro Security Products
CVE-2022-30703

7.8HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Security (consumer)
Vendor
CVE Published:
9 June 2022

Summary

Trend Micro Security 2021 and 2022 products have a vulnerability that allows an attacker to exploit an exposed dangerous method, potentially leading to the disclosure of sensitive information through leaked kernel addresses. This vulnerability raises concerns for user data privacy and may also allow for the escalation of privileges if successfully exploited, making it crucial for users to apply security patches and remain vigilant.

Affected Version(s)

Trend Micro Security (Consumer) 2022 (17.7.1383 and below)

References

https://helpcenter.trendmicro.com/en-us/article/tmka-11021
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-801/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.