Vendors / WithSecure Records 20 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 14
Exploited now WithSecure records in CISA KEV No WithSecure vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-835
Priority MEDIUM 40
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-835
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority LOW 36
WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00404 · Published 2024-05-22 · No fix listed CWE-59
Priority LOW 34
Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00701 · Published 2023-11-16 · No fix listed CWE-125
Priority LOW 34
Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00701 · Published 2023-11-16 · No fix listed
Priority LOW 33
Certain WithSecure products allow Local Privilege Escalation.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2023-11-20 · No fix listed
Priority LOW 33
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00485 · Published 2022-09-06 · No fix listed CWE-835
Priority LOW 31
Certain WithSecure products allow Local Privilege Escalation.
CVSS 3.1 MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00174 · Published 2024-02-08 · No fix listed CWE-269
Open these records in search → All records by CVSS severity
2 14 3 1 0
THREATIST.IORead the docs