CVE-2022-40708
28.09.2022, 21:15
An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.Enginsight
| Vendor | Product | Version |
|---|---|---|
| trendmicro | deep_security_agent | 20.0 |
| trendmicro | deep_security_agent | 20.0:update1337 |
| trendmicro | deep_security_agent | 20.0:update1559 |
| trendmicro | deep_security_agent | 20.0:update158 |
| trendmicro | deep_security_agent | 20.0:update167 |
| trendmicro | deep_security_agent | 20.0:update1681 |
| trendmicro | deep_security_agent | 20.0:update173 |
| trendmicro | deep_security_agent | 20.0:update180 |
| trendmicro | deep_security_agent | 20.0:update182 |
| trendmicro | deep_security_agent | 20.0:update1822 |
| trendmicro | deep_security_agent | 20.0:update183 |
| trendmicro | deep_security_agent | 20.0:update1876 |
| trendmicro | deep_security_agent | 20.0:update190 |
| trendmicro | deep_security_agent | 20.0:update198 |
| trendmicro | deep_security_agent | 20.0:update2009 |
| trendmicro | deep_security_agent | 20.0:update208 |
| trendmicro | deep_security_agent | 20.0:update213 |
| trendmicro | deep_security_agent | 20.0:update2204 |
| trendmicro | deep_security_agent | 20.0:update223 |
| trendmicro | deep_security_agent | 20.0:update224 |
| trendmicro | deep_security_agent | 20.0:update2419 |
| trendmicro | deep_security_agent | 20.0:update2593 |
| trendmicro | deep_security_agent | 20.0:update2740 |
| trendmicro | deep_security_agent | 20.0:update2921 |
| trendmicro | deep_security_agent | 20.0:update3165 |
| trendmicro | deep_security_agent | 20.0:update3288 |
| trendmicro | deep_security_agent | 20.0:update3445 |
| trendmicro | deep_security_agent | 20.0:update3530 |
| trendmicro | deep_security_agent | 20.0:update3771 |
| trendmicro | deep_security_agent | 20.0:update3964 |
| trendmicro | deep_security_agent | 20.0:update4185 |
| trendmicro | deep_security_agent | 20.0:update4416 |
| trendmicro | deep_security_agent | 20.0:update4726 |
| trendmicro | deep_security_agent | 20.0:update4959 |
| trendmicro | deep_security_agent | 20.0:update5137 |
| trendmicro | deep_security_agent | 20.0:update877 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration