PatchTheCVECVE-2022-37347: Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vu
CVE-2022-37347 is a medium-severity flaw (CVSS 5.5) affecting security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. This vulnerability is similar to, but not the same as CVE-2022-35234.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 80%) |
| CISA exploited list | No |
| Weakness | CWE-125 |
| Published | 2022-09-19 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-37347?
security: upgrade to newer than 17.7.1383. Exact commands for each OS are on this page.
Is CVE-2022-37347 being exploited?
CVE-2022-37347 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-37347 affect?
CVE-2022-37347 affects security. Severity is medium (CVSS 5.5). Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affecte
How urgent is CVE-2022-37347?
Priority 24/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2024-3779 MEDIUM 6.1 UPGRADE UPGRADE Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an
- CVE-2024-1619 MEDIUM 6.1 UPGRADE Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server
- CVE-2022-37348 MEDIUM 5.5 UPGRADE Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vu
- CVE-2022-35234 HIGH 7.1 DOWNGRADE Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vu
- CVE-2022-34893 HIGH 7.8 UPGRADE Trend Micro Security 2022 (consumer) has a link following vulnerability where an attacker with lower privilege