WithSecure vulnerabilities
We track 13 vulnerabilities in WithSecure products across 12 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2024.
Latest WithSecure vulnerabilities
- 7.8 High severity
Elements: Improper Link Resolution Before File Access
WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of WithSecure Elements Endpoint Protection. User interaction on the part
- 7.5 High severity
client_security: Loop with Unreachable Exit Condition
Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, W
- 7.5 High severity
Client Security: Out-of-bounds Read
Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure E
- 7.5 High severity
Client Security: Loop with Unreachable Exit Condition
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a
- 7.5 High severity
Client Security: Loop with Unreachable Exit Condition
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a
- 7.5 High severity
Client Security: Uncontrolled Resource Consumption
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and
- 7.5 High severity
Client Security: Uncontrolled Resource Consumption
Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpo
- 7.5 High severity
Client Security: Uncontrolled Resource Consumption
Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protecti
- 7.5 High severity
Client Security: Uncontrolled Resource Consumption
Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Prot
- 7.5 High severity
Client Security: Uncontrolled Resource Consumption
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protecti
- 9.8 Critical severity
F-secure Policy Manager: Improper Limitation of a Pathname to a Restricted Directory
Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary locations on the F-Secure Policy Manager Server.
- 7.5 High severity
All F-Secure and WithSecure Endpoint…: Loop with Unreachable Exit Condition
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine.
- 7.5 High severity
F-Secure endpoint protection products for…: Out-of-bounds Write
Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploi