CVE-2022-28394

HIGH 7.8CVE-2022-28394 · Published 27/05/2022 · updated 17/06/2026

In short

CVE-2022-28394 is a HIGH (CVSS 7.8) vulnerability affecting password manager (trendmicro).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.3% of all vulnerabilities.
Fix: update to 3.7.0.1223 or later.

Package	Affected versions	Patched versions
password manager trendmicro	`< 3.7.0.1223`	`3.7.0.1223`

Description

EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Please note that this was reported on an EOL version of the product, and users are advised to upgrade to the latest supported version (5.x).

References

helpcenter.trendmicro.com/ja-jp/article/TMKA-10977 · Vendor Advisory
jvn.jp/en/jp/JVN60037444 · Third Party Advisory
jvn.jp/jp/JVN60037444 · Third Party Advisory

More vulnerabilities in password manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

password manager

trendmicro

< 3.7.0.1223

3.7.0.1223

Description

More vulnerabilities in password manager

See all →