What’s Vulnerable › Vulnerabilities

CVE-2022-37347

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-19 · updated 2026-06-17
• Weakness: CWE-125

Description

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. This vulnerability is similar to, but not the same as CVE-2022-35234.

Affected products

• Trend Micro Security (Consumer): through 17.7.1383

References

• https://helpcenter.trendmicro.com/en-us/article/tmka-11058
• https://www.zerodayinitiative.com/advisories/ZDI-22-1176/
• https://helpcenter.trendmicro.com/en-us/article/tmka-11058
• https://www.zerodayinitiative.com/advisories/ZDI-22-1176/

Get alerted when CVE-2022-37347 or the next vulnerability affects your stack