Aggregates CVE and security vulnerability intelligence across all F-Secure-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk path handling, vendor risk memory corruption, vendor risk sql injection, and vendor risk open redirect and related problems; some flaws may lead to vendor impact unexpected behavior.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2022-28880 | A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker. | [email protected] | 4.3 | 0.41% | 2022-08-05 | 2026-06-17 |
| CVE-2022-28879 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine. | [email protected] | 4.3 | 0.39% | 2022-07-22 | 2026-06-17 |
| CVE-2022-28878 | A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine. | [email protected] | 4.3 | 0.39% | 2022-07-22 | 2026-06-17 |
| CVE-2022-28877 | This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation. | [email protected] | 4.3 | 0.33% | 2022-07-21 | 2026-06-17 |
| CVE-2022-28876 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker. | [email protected] | 4.3 | 0.39% | 2022-07-14 | 2026-06-17 |
| CVE-2022-28875 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker. | [email protected] | 4.3 | 0.50% | 2022-05-25 | 2026-06-17 |
| CVE-2022-28874 | Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker. | [email protected] | 4.3 | 0.57% | 2022-05-23 | 2026-06-17 |
| CVE-2022-28873 | A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks. | [email protected] | 4.3 | 0.53% | 2022-05-12 | 2026-06-17 |
| CVE-2022-28872 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop. | [email protected] | 4.3 | 0.46% | 2022-05-12 | 2026-06-17 |
| CVE-2022-28871 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker. | [email protected] | 4.3 | 0.51% | 2022-04-25 | 2026-06-17 |
| CVE-2022-28870 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails. | [email protected] | 4.3 | 0.43% | 2022-04-15 | 2026-06-17 |
| CVE-2022-28869 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number. | [email protected] | 4.3 | 0.43% | 2022-04-15 | 2026-06-17 |
| CVE-2022-28868 | An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/URL, user may be tricked for a short period of time (until the page loads) to think content may be coming from a valid domain, while the content comes from the attacker controlled site. | [email protected] | 4.3 | 0.51% | 2022-04-15 | 2026-06-17 |
| CVE-2021-44751 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In most modern Android OS, dialer application will require user interaction, however, some older Android OS may not need user interaction. | [email protected] | 4.3 | 0.55% | 2022-03-25 | 2026-06-17 |
| CVE-2021-44750 | An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands. | [email protected] | 6.4 | 0.70% | 2022-03-10 | 2026-06-17 |
| CVE-2021-44749 | A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to arbitrary code execution. | [email protected] | 5.5 | 0.77% | 2022-03-06 | 2026-06-17 |
| CVE-2021-44748 | A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required prior to exploitation, such as entering a malicious website to trigger the vulnerability. | [email protected] | 5.5 | 0.53% | 2022-03-06 | 2026-06-17 |
| CVE-2021-44747 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine. | [email protected] | 4.6 | 0.61% | 2022-03-01 | 2026-06-17 |
| CVE-2021-40837 | A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine. | [email protected] | 4.6 | 0.66% | 2022-02-09 | 2026-06-17 |
| CVE-2021-40836 | A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine. | [email protected] | 4.6 | 0.46% | 2021-12-22 | 2026-06-17 |