CVE-2022-37347

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. This vulnerability is similar to, but not the same as CVE-2022-35234.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Trend Micro	Trend Micro Security (Consumer)	2022 (17.7.1383 and below)

References

https://helpcenter.trendmicro.com/en-us/article/tmka-11058Patch, Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-1176/Third Party Advisory, VDB Entry
https://helpcenter.trendmicro.com/en-us/article/tmka-11058Patch, Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-1176/Third Party Advisory, VDB Entry

Timeline

Published: Sep 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-373485.5Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow a CVE-2022-373497.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-37359.8A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/publ CVE-2022-373507.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-373515.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti CVE-2022-373525.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti CVE-2022-373535.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti CVE-2022-373547.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-373557.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-373567.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-373577.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-373587.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re