CVE-2019-14684
Last modified
CVE-2019-14684 is a vulnerability of currently unknown severity. A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.. EPSS estimates a 1.46% chance of exploitation in the next 30 days.
Description
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Password Manager | 5.0 |
References
- https://safebreach.com/Post/Trend-Micro-Password-Manager-Privilege-Escalation-to-SYSTEMExploit, Third Party Advisory
- https://safebreach.com/Post/Trend-Micro-Password-Manager-Privilege-Escalation-to-SYSTEMExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-14684?
How severe is CVE-2019-14684?
How do I fix CVE-2019-14684?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-14679core/views/arprice_import_export.php in the ARPrice Lite plu…
- CVE-2019-1468A remote code execution vulnerability exists when the Window…8.8
- CVE-2019-14680The admin-renamer-extended (aka Admin renamer extended) plug…5.7
- CVE-2019-14681The Deny All Firewall plugin before 1.1.7 for WordPress allo…
- CVE-2019-14682The acf-better-search (aka ACF: Better Search) plugin before…
- CVE-2019-14683The codection "Import users from CSV with meta" plugin befor…5.7
- CVE-2019-14685A local privilege escalation vulnerability exists in Trend M…
- CVE-2019-14686A DLL hijacking vulnerability exists in the Trend Micro Secu…
- CVE-2019-14687A DLL hijacking vulnerability exists in Trend Micro Password…
- CVE-2019-14688Trend Micro has repackaged installers for several Trend Micr…7
- CVE-2019-1469An information disclosure vulnerability exists when the win3…5.5
- CVE-2019-14690AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlay…8.8
Are you affected by CVE-2019-14684?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST