CVE-2022-30703

high

Description

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This vulnerability could also potentially be chained for privilege escalation.

References

https://www.zerodayinitiative.com/advisories/ZDI-22-801/

https://helpcenter.trendmicro.com/en-us/article/tmka-11021

Details

Source: Mitre, NVD

Published: 2022-06-09

Updated: 2022-06-16

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High