CVE-2018-18334 Information disclosure in Trend Micro Dr. Safety for Android (Consumer)
Remote attackers can bypass Same Origin Policy in Trend Micro Dr. Safety for Android to obtain sensitive information via crafted JavaScript.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-18334?
CVE-2018-18334 is a high-severity vulnerability in Trend Micro Dr. Safety for Android (Consumer), published on 5 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy (SOP) and obtain sensitive information via crafted JavaScript code on vulnerable installations.
Weakness: CWE-200
Which versions are affected by CVE-2018-18334?
It affects 1 product.
Products include Trendmicro Dr. Safety.
How do I fix CVE-2018-18334?
No fix has been published for CVE-2018-18334 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-18334 being exploited?
There is no known exploitation of CVE-2018-18334 in the wild and no public exploit code.
Other vulnerabilities in Trend Micro Dr. Safety for Android (Consumer)
Sources
Also known as GHSA-7r9g-54h2-hf75.