Withsecure Client Security — known CVE vulnerabilities

Every CVE whose affected-product data names Withsecure Client Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2023-47172 — CVSS 7.8 (high): Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15…
• CVE-2024-4454 — CVSS 7.8 (high): WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers…
• CVE-2023-42522 — CVSS 7.5 (high): Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects…
• CVE-2023-42523 — CVSS 7.5 (high): Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security…
• CVE-2023-42524 — CVSS 7.5 (high): Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security…
• CVE-2023-42525 — CVSS 7.5 (high): Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security…
• CVE-2023-42520 — CVSS 7.5 (high): Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client…
• CVE-2023-47263 — CVSS 7.5 (high): Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects…
• CVE-2023-47264 — CVSS 7.5 (high): Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This…
• CVE-2023-42526 — CVSS 7.5 (high): Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure…
• CVE-2023-42521 — CVSS 7.5 (high): Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client…
• CVE-2024-23764 — CVSS 6.7 (medium): Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server…