CVE-2021-32461

Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer overflow and escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

• CWE-681

• https://helpcenter.trendmicro.com/en-us/article/TMKA-10388Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-773/Third Party Advisory, VDB Entry
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10388Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-773/Third Party Advisory, VDB Entry

Published

Jul 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32456SITEL CAP/PRX firmware version 5.2.01 allows an attacker wit…6.5
• CVE-2021-32457Trend Micro Home Network Security version 6.6.604 and earlie…7.8
• CVE-2021-32458Trend Micro Home Network Security version 6.6.604 and earlie…7.8
• CVE-2021-32459Trend Micro Home Network Security version 6.6.604 and earlie…6.5
• CVE-2021-3246A heap buffer overflow vulnerability in msadpcm_decode_block…8.8
• CVE-2021-32460The Trend Micro Maximum Security 2021 (v17) consumer product…7.8
• CVE-2021-32462Trend Micro Password Manager (Consumer) version 5.0.0.1217 a…8.8
• CVE-2021-32463An incorrect permission assignment denial-of-service vulnera…7.8
• CVE-2021-32464An incorrect permission assignment privilege escalation vuln…7.8
• CVE-2021-32465An incorrect permission preservation vulnerability in Trend …8.8
• CVE-2021-32466An uncontrolled search path element privilege escalation vul…7
• CVE-2021-32467MediaTek microchips, as used in NETGEAR devices through 2021…7.5