CVE-2022-28394

The CVE-2022-28394 entry concerns the Trend Micro Password Manager installer (Consumer) prior to version 3.7.0.1223. The root cause is an insecure DLL search path (CWE-427) in the installer, which may allow loading Arbitrary DLLs. Reported impacts indicate arbitrary code execution with the privil...