{"id":"CVE-2019-14684","aliases":["EUVD-2019-5835","GHSA-rh2p-w62g-2f9q"],"status":"published","title":"A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited,...","description":"A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01461,"percentile":0.73781,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-426","CWE-427"],"published":"2019-08-20T13:30:04Z","modified":"2026-06-17T02:18:48Z","products":[{"vendor":"trend micro","product":"trend micro password manager"},{"vendor":"trend micro, inc.","product":"trend micro password manager"},{"vendor":"trendmicro","product":"password_manager"}],"references":[{"url":"https://safebreach.com/Post/Trend-Micro-Password-Manager-Privilege-Escalation-to-SYSTEM","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123396.aspx","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14684"},{"url":"https://github.com/advisories/GHSA-rh2p-w62g-2f9q"}],"sources":{"cve":[{"id":"CVE-2019-14684","description":"A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.","status":"published","published":"2019-08-20T13:30:04Z","modified":"2024-08-05T00:19:41.449Z","updated_at":"2026-11-02T14:20:18.085548Z"}],"euvd":[{"id":"EUVD-2019-5835","description":"A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.","status":"published","published":"2019-08-20T13:30:04Z","modified":"2024-08-05T00:19:41Z","updated_at":"2026-11-03T02:40:39.076786Z"}],"ghsa":[{"id":"GHSA-rh2p-w62g-2f9q","title":"A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited,...","description":"A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.","status":"published","published":"2022-05-24T16:54:04Z","modified":"2023-01-28T05:06:42Z","cwes":["CWE-426"],"updated_at":"2026-11-02T14:44:27.320019Z"}],"nvd":[{"id":"CVE-2019-14684","description":"A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.","status":"published","published":"2019-08-20T14:15:11.037Z","modified":"2026-06-17T02:18:48.67Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:05:22.878504Z"}]}}