CVE-2021-32462

Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an unprivileged client to manipulate the registry and escalate privileges to SYSTEM on affected installations. Authentication is required to exploit this vulnerability.

• https://helpcenter.trendmicro.com/en-us/article/TMKA-10388Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-774/Third Party Advisory, VDB Entry
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10388Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-774/Third Party Advisory, VDB Entry

Published

Jul 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32457Trend Micro Home Network Security version 6.6.604 and earlie…7.8
• CVE-2021-32458Trend Micro Home Network Security version 6.6.604 and earlie…7.8
• CVE-2021-32459Trend Micro Home Network Security version 6.6.604 and earlie…6.5
• CVE-2021-3246A heap buffer overflow vulnerability in msadpcm_decode_block…8.8
• CVE-2021-32460The Trend Micro Maximum Security 2021 (v17) consumer product…7.8
• CVE-2021-32461Trend Micro Password Manager (Consumer) version 5.0.0.1217 a…7.8
• CVE-2021-32463An incorrect permission assignment denial-of-service vulnera…7.8
• CVE-2021-32464An incorrect permission assignment privilege escalation vuln…7.8
• CVE-2021-32465An incorrect permission preservation vulnerability in Trend …8.8
• CVE-2021-32466An uncontrolled search path element privilege escalation vul…7
• CVE-2021-32467MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-32468MediaTek microchips, as used in NETGEAR devices through 2021…7.5