Skip to content

Withsecure · weakness class

Denial of Service

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Securi…CVE-2023-42526Withsecure · 0.6% likely

    CWE-400

  2. Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, With…CVE-2023-42525Withsecure · 0.6% likely

    CWE-835

  3. Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, With…CVE-2023-42524Withsecure · 0.6% likely

    CWE-835

  4. Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSe…CVE-2023-42523Withsecure · 0.6% likely

    CWE-400

  5. Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Serve…CVE-2023-42522Withsecure · 0.6% likely

    CWE-400

  6. Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 1…CVE-2023-42521Withsecure · 0.6% likely

    CWE-400

  7. Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 1…CVE-2023-42520Withsecure · 0.6% likely

    CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.