CVE-2019-14687
Last modified
CVE-2019-14687 is a vulnerability of currently unknown severity. A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684.. EPSS estimates a 1.55% chance of exploitation in the next 30 days.
Description
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Password Manager | 5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-14687?
How severe is CVE-2019-14687?
How do I fix CVE-2019-14687?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-14681The Deny All Firewall plugin before 1.1.7 for WordPress allo…
- CVE-2019-14682The acf-better-search (aka ACF: Better Search) plugin before…
- CVE-2019-14683The codection "Import users from CSV with meta" plugin befor…5.7
- CVE-2019-14684A DLL hijacking vulnerability exists in Trend Micro Password…
- CVE-2019-14685A local privilege escalation vulnerability exists in Trend M…
- CVE-2019-14686A DLL hijacking vulnerability exists in the Trend Micro Secu…
- CVE-2019-14688Trend Micro has repackaged installers for several Trend Micr…7
- CVE-2019-1469An information disclosure vulnerability exists when the win3…5.5
- CVE-2019-14690AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlay…8.8
- CVE-2019-14691AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader:…8.8
- CVE-2019-14692AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer:…8.8
- CVE-2019-14693Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XM…8.5
Are you affected by CVE-2019-14687?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST