Out-of-Bounds Read Vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Windows

CVE-2022-40708

What is CVE-2022-40708?

An Out-of-bounds read vulnerability exists in Trend Micro's Deep Security 20 and the Cloud One - Workload Security Agent for Windows. This vulnerability could allow a local attacker, who has already gained low-privileged code execution on the target system, to read sensitive data from memory that should not be accessible. The issue highlights the importance of protecting system boundaries to prevent unauthorized data access. For more details, refer to the Trend Micro advisory and Zero Day Initiative reports.

References