Skip to main content

Vendor archive

f-secure CVEs

Beta · best-effort

122 CVEs tagged to vendor f-secure5 Critical, 35 High, 71 Medium, 11 Low, 0 Unrated.

CVE-2024-7240

Published Nov 22, 2024

F-Secure Total Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of F-Secure Tota…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-49322

Published Nov 27, 2023

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15…

CVSS 7.5 · High

CVE-2023-49321

Published Nov 27, 2023

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15…

CVSS 5.3 · Medium

CVE-2023-43767

Published Sep 22, 2023

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Em…

CVSS 7.5 · High

CVE-2023-43766

Published Sep 22, 2023

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSec…

CVSS 7.8 · High

CVE-2023-43765

Published Sep 22, 2023

Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server…

CVSS 7.5 · High

CVE-2023-43761

Published Sep 22, 2023

Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Securit…

CVSS 7.5 · High

CVE-2023-43760

Published Sep 22, 2023

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server…

CVSS 7.5 · High

CVE-2022-47524

Published Dec 23, 2022

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack.

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-45871

Published Dec 13, 2022

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit c…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-38164

Published Nov 7, 2022

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attack with URL spoofing as the browser onl…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-38163

Published Nov 7, 2022

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead t…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-28887

Published Oct 12, 2022

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possibl…

CVSS 4.3 · Medium

CVE-2022-28885

Published Sep 6, 2022

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing the scanning request.

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-28883

Published Aug 23, 2022

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine cra…

CVSS 3.5 · Low

CVE-2022-28882

Published Aug 23, 2022

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventual…

CVSS 4.3 · Medium

CVE-2022-28881

Published Aug 10, 2022

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads…

CVSS 4.3 · Medium

CVE-2022-28880

Published Aug 5, 2022

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the s…

CVSS 4.3 · Medium

CVE-2022-28879

Published Jul 22, 2022

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning e…

CVSS 4.3 · Medium

CVE-2022-28878

Published Jul 22, 2022

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scannin…

CVSS 4.3 · Medium

CVE-2022-28876

Published Jul 14, 2022

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning e…

CVSS 4.3 · Medium
Showing 1-25 of 122 CVEsPage 1 of 5