Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
WithSecure records in CISA KEVNo WithSecure vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-835
Priority MEDIUM 40
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-835
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-09-18 · No fix listed CWE-400
Priority LOW 34
Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00701 · Published 2023-11-16 · No fix listed CWE-125
Priority LOW 34
Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00701 · Published 2023-11-16 · No fix listed
THREATIST.IORead the docs