CVE-2022-28394

7.8 highEPSS 0.3%

High (7.8) in trendmicro password manager. EPSS 0.3% chance of exploitation in the next 30 days.

EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Please note that this was reported on an EOL version of the product, and users are advised to upgrade to the latest supported version (5.x).

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2022-05-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:password_manager

References

https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10977
https://jvn.jp/en/jp/JVN60037444/
https://jvn.jp/jp/JVN60037444/
https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10977
https://jvn.jp/en/jp/JVN60037444/

Check your stack JSON