Out-of-Bounds Read Vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Windows
CVE-2022-40708

3.3LOW

Key Information:

Vendor
CVE Published:
28 September 2022

Summary

An Out-of-bounds read vulnerability exists in Trend Micro's Deep Security 20 and the Cloud One - Workload Security Agent for Windows. This vulnerability could allow a local attacker, who has already gained low-privileged code execution on the target system, to read sensitive data from memory that should not be accessible. The issue highlights the importance of protecting system boundaries to prevent unauthorized data access. For more details, refer to the Trend Micro advisory and Zero Day Initiative reports.

Affected Version(s)

Trend Micro Deep Security 20

References

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.