CVE-2020-8469: 
Trend Micro Password Manager vulnerability analysis and mitigation

Trend Micro Password Manager for Windows version 5.0 was affected by a DLL hijacking vulnerability (CVE-2020-8469) that could potentially allow an attacker to achieve privileged escalation. The vulnerability was disclosed in June 2020 and is classified as an Uncontrolled Search Path Element vulnerability with a CVSSv3 score of 7.3 (Full Disclosure).

The vulnerability is classified as an Uncontrolled Search Path Element (CWE-427) which occurs when the software uses a path that is under the control of actors other than the intended system administrators. In this case, the vulnerability exists in the DLL loading mechanism of Trend Micro Password Manager version 5.0 (Full Disclosure).

The successful exploitation of this vulnerability could allow an attacker to obtain SYSTEM privileges on the affected Windows system, effectively achieving privilege escalation (Full Disclosure).

Users should upgrade to a patched version of the Trend Micro Password Manager. The vulnerability was reported to and acknowledged by Trend Micro, who subsequently released a security update to address the issue (Full Disclosure).