Out-of-bounds Read Vulnerability in Trend Micro’s Deep Security and Cloud One Product

CVE-2022-40707

What is CVE-2022-40707?

An out-of-bounds read vulnerability exists in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows, which may allow a local attacker to disclose sensitive information from affected installations. To exploit this vulnerability, the attacker needs to first gain the ability to execute low-privileged code on the target system. This issue poses information disclosure risks and is akin to other vulnerabilities that may allow similar exploits.

References