Skip to content

Withsecure · product

Client Security

11 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

  1. Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Client Security 15, Wit…CVE-2023-47264Withsecure · 0.7% likely

    CWE-125

  2. Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server…CVE-2023-47263Withsecure · 0.7% likely
  3. Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Securi…CVE-2023-42526Withsecure · 0.6% likely

    CWE-400

  4. Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, With…CVE-2023-42525Withsecure · 0.6% likely

    CWE-835

  5. Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, With…CVE-2023-42524Withsecure · 0.6% likely

    CWE-835

  6. Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSe…CVE-2023-42523Withsecure · 0.6% likely

    CWE-400

  7. Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Serve…CVE-2023-42522Withsecure · 0.6% likely

    CWE-400

  8. Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 1…CVE-2023-42521Withsecure · 0.6% likely

    CWE-400

  9. Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 1…CVE-2023-42520Withsecure · 0.6% likely

    CWE-400

  10. Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, a…CVE-2023-47172Withsecure · 0.2% likely
  11. Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and S…CVE-2024-23764Withsecure · CVSS 6.7 · 0.2% likely

    CWE-269

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.