CVE-2022-26337: Trend Micro Password Manager

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine.

Affected products

• Trend Micro Password Manager: before 5.0.0.1266 (fixed in 5.0.0.1266)

Published 2022-03-08. Last modified 2026-06-17.