VULNERABILITY INTELLIGENCE
CVE-2019-14687
CVSS score7.8 HIGH
EPSS probability1.55%
CISA KEVNot currently listed
Published2019-08-20
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684.
Weakness classification
- nvd@nist.gov: CWE-427
Primary references
- security@trendmicro.com — Vendor Advisory
- security@trendmicro.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108