CVE-2022-40707

Published: Sep 28, 2022Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40708.

Affected (36)

Products: Trendmicro: Deep Security Agent

Trendmicro

1 product

Deep Security Agent

Configuration A

36 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendmicro Deep Security Agent	Version 20.0
Trendmicro Deep Security Agent	Version 20.0 update1337
Trendmicro Deep Security Agent	Version 20.0 update1559
Trendmicro Deep Security Agent	Version 20.0 update158
Trendmicro Deep Security Agent	Version 20.0 update167
Trendmicro Deep Security Agent	Version 20.0 update1681
Trendmicro Deep Security Agent	Version 20.0 update173
Trendmicro Deep Security Agent	Version 20.0 update180
Trendmicro Deep Security Agent	Version 20.0 update1822
Trendmicro Deep Security Agent	Version 20.0 update182
Trendmicro Deep Security Agent	Version 20.0 update183
Trendmicro Deep Security Agent	Version 20.0 update1876
Trendmicro Deep Security Agent	Version 20.0 update190
Trendmicro Deep Security Agent	Version 20.0 update198
Trendmicro Deep Security Agent	Version 20.0 update2009
Trendmicro Deep Security Agent	Version 20.0 update208
Trendmicro Deep Security Agent	Version 20.0 update213
Trendmicro Deep Security Agent	Version 20.0 update2204
Trendmicro Deep Security Agent	Version 20.0 update223
Trendmicro Deep Security Agent	Version 20.0 update224
Trendmicro Deep Security Agent	Version 20.0 update2419
Trendmicro Deep Security Agent	Version 20.0 update2593
Trendmicro Deep Security Agent	Version 20.0 update2740
Trendmicro Deep Security Agent	Version 20.0 update2921
Trendmicro Deep Security Agent	Version 20.0 update3165
Trendmicro Deep Security Agent	Version 20.0 update3288
Trendmicro Deep Security Agent	Version 20.0 update3445
Trendmicro Deep Security Agent	Version 20.0 update3530
Trendmicro Deep Security Agent	Version 20.0 update3771
Trendmicro Deep Security Agent	Version 20.0 update3964
Trendmicro Deep Security Agent	Version 20.0 update4185
Trendmicro Deep Security Agent	Version 20.0 update4416
Trendmicro Deep Security Agent	Version 20.0 update4726
Trendmicro Deep Security Agent	Version 20.0 update4959
Trendmicro Deep Security Agent	Version 20.0 update5137
Trendmicro Deep Security Agent	Version 20.0 update877