Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-40708


An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.


Published

2022-09-28T21:15:15.137

Last Modified

2025-05-20T21:15:22.640

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.3 (LOW)

Weaknesses
  • Type: Primary
    CWE-125
  • Type: Secondary
    CWE-125

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Application trendmicro deep_security_agent 20.0 Yes
Operating System microsoft windows - No

References