← Vulnerability feed

Vulnerability record · CVE-2022-38764 · published 19 September 2022

CVE-2022-38764: Trendmicro housecall incorrect default permissions vulnerability

Trendmicro · Housecall

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer.

7.8 CVSS 3.1 High EPSS 0.22% · top 88.6% CWE-276 · Incorrect default permissions
7.8CVSS 3.1 base score
0.22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://helpcenter.trendmicro.com/en-us/article/tmka-11092 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-1178/ Third Party AdvisoryVDB Entry
https://helpcenter.trendmicro.com/en-us/article/tmka-11092 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-1178/ Third Party AdvisoryVDB Entry

Track CVE-2022-38764 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

4.3CVE-2012-1456Antivirus TAR parsers bypassed by appended ZIP fileMultiple antivirus products parse TAR archives in a way that lets a TAR file with an appended ZIP evade malware detection. An attacker can therefore …EPSS 100%analysed4.3CVE-2012-1457Antivirus TAR parser malware detection bypass via oversized length fieldThe TAR file parser in numerous antivirus and anti-malware products mishandles a TAR archive entry whose length field exceeds the total TAR file size…EPSS 98%analysed4.3CVE-2012-1459TAR parser malware detection bypass in multiple antivirus productsThe TAR file parser in dozens of antivirus products mishandles a TAR archive entry whose length field spans the entire entry plus part of the next en…EPSS 100%analysed4.3CVE-2012-1461Gzip parser in multiple antivirus products allows malware detection bypassThe Gzip file parser in numerous antivirus and anti-malware products mishandles .tar.gz files containing multiple compressed streams, allowing a craf…EPSS 92%analysed4.3CVE-2012-1443RAR parser malware detection bypass in multiple antivirus enginesThe RAR file parser in dozens of antivirus products fails to correctly handle a RAR archive whose contents begin with an MZ character sequence, allow…EPSS 100%analysed4.3CVE-2012-1448CAB parser malware detection bypass in multiple antivirus productsThe CAB file parser in Quick Heal 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro Hou…EPSS 89%analysed4.3CVE-2012-1453CAB parser malware detection bypass in multiple antivirus productsThe CAB file parser in numerous antivirus and security products mishandles the coffFiles field, allowing a crafted CAB archive to evade malware detec…EPSS 98%analysed4.3CVE-2012-1425Multiple antivirus TAR parsers allow malware detection bypass via crafted POSIX TAR headerThe TAR file parser in numerous antivirus products mishandles POSIX TAR files whose initial bytes are the \50\4B\03\04 sequence, letting a crafted ar…EPSS 93%analysed

Source: NIST National Vulnerability Database (record CVE-2022-38764), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.