Medium severity · published Jan 18, 2020
CVE-2019-15625
A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract…
5.5
CVSS
1%
EPSS
No
On KEV
Description
A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
Password Manager · Trendmicro
3.8 through 3.8.0.1052; 3.8 through 3.8.0.1103 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-15625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-15625
Vendor Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123595.aspx
Vendor Advisory
https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1123614.aspx
Third Party Advisory
https://jvn.jp/en/jp/JVN49593434/index.html
Third Party Advisory
https://jvn.jp/jp/JVN49593434/index.html
More from Password Manager
9.8
CVE-2016-3987
The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB
8.8
CVE-2021-32462
Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an…
7.8
CVE-2025-52837
Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the…
7.8
CVE-2022-28394
EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search…
7.8
CVE-2022-30523
Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local…