Back
CVE-2022-28394
EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated…
High7.8EPSS 0.28%
- Published
- Updated
- Reserved
- Assigned by
- trendmicro
Description
EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Please note that this was reported on an EOL version of the product, and users are advised to upgrade to the latest supported version (5.x).
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.28% · top 80% of all CVEs (7 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
- Uncontrolled Search Path Element
- CWE-427 (opens in a new tab)All about CWE-427 and its CVEs
Affected products
Trend Micro · Trend Micro Password Manager
- affected 3.7.0.1223 and below
References (3)
- https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10977 (opens in a new tab)x_refsource_MISCx_transferred
- https://jvn.jp/en/jp/JVN60037444/ (opens in a new tab)x_refsource_MISCx_transferred
- https://jvn.jp/jp/JVN60037444/ (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-28394)Record last updated .