Vendors / F-Secure Records 120 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6
CVSS high 50
Exploited now F-Secure records in CISA KEV No F-Secure vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Certain WithSecure products allow Denial of Service via the aepack archive unpack handler.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00635 · Published 2023-09-22 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow Denial of Service in the aeelf component.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00635 · Published 2023-09-22 · No fix listed
Priority MEDIUM 40
Certain WithSecure products allow Denial of Service (infinite loop).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00635 · Published 2023-09-22 · No fix listed CWE-835
Priority LOW 37
In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workst…
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01476 · Published 2019-05-17 · No fix listed CWE-427
Priority LOW 35
Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2023-09-22 · No fix listed CWE-269
Priority LOW 34
Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00701 · Published 2023-11-26 · No fix listed
Priority LOW 34
Certain WithSecure products allow Denial of Service via a fuzzed PE32 file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00635 · Published 2023-09-22 · No fix listed
Priority LOW 34
Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Securi…
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02209 · Published 2009-05-22 · No fix listed
Priority LOW 33
An arbitrary code execution vulnerability was found in the F-Secure Support Tool.
CVSS 3.1 HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00742 · Published 2022-03-09 · No fix listed
Priority LOW 26
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00534 · Published 2021-08-05 · No fix listed
Priority LOW 25
Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00613 · Published 2023-11-26 · No fix listed
Open these records in search → All records by CVSS severity
6 50 58 6 0
THREATIST.IORead the docs