CVE-2024-23764: Certain WithSecure products allow Local Privilege Escalation

Routine

MEDIUM 6.7DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2024-23764 is a medium-severity flaw (CVSS 6.7) affecting client security, server security, email and server security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and Server Security 15 and later, and WithSecure Elements Endpoint Protection 17 and later.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	6.7 (Medium)
Attack vector	Local
Attack complexity	Low
Privileges needed	High
User interaction	None
EPSS exploit chance	0.2% (top 93%)
CISA exploited list	No
Weakness	CWE-269
Published	2024-02-08
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: withsecure

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2024-02-08 19:15 UTCPublished CVE record published
2026-06-17 07:13 UTCUpdated Record last modified

withsecure client security DOWNGRADE

Affected: 15

Fixed in: no fixed release known

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy client-security || rpm -q client-security || client-security --version

2. No fixed release: DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison client-security sudo apt install client-security=<VERSION_BEFORE_15> sudo apt-mark hold client-security

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list client-security sudo dnf downgrade client-security-<VERSION_BEFORE_15> sudo dnf versionlock add client-security

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

withsecure server security DOWNGRADE

Affected: 15

Fixed in: no fixed release known

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy server-security || rpm -q server-security || server-security --version

2. No fixed release: DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison server-security sudo apt install server-security=<VERSION_BEFORE_15> sudo apt-mark hold server-security

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list server-security sudo dnf downgrade server-security-<VERSION_BEFORE_15> sudo dnf versionlock add server-security

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

withsecure email and server security DOWNGRADE

Affected: 15

Fixed in: no fixed release known

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy email-and-server-security || rpm -q email-and-server-security || email-and-server-security --version

2. No fixed release: DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison email-and-server-security sudo apt install email-and-server-security=<VERSION_BEFORE_15> sudo apt-mark hold email-and-server-security

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list email-and-server-security sudo dnf downgrade email-and-server-security-<VERSION_BEFORE_15> sudo dnf versionlock add email-and-server-security

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

withsecure elements endpoint protection DOWNGRADE

Affected: 17

Fixed in: no fixed release known

Safe to downgrade to: a release before 17

1. Check installed version

apt-cache policy elements-endpoint-protection || rpm -q elements-endpoint-protection || elements-endpoint-protection --version

2. No fixed release: DOWNGRADE to a release before 17 (Debian / Ubuntu)

apt-cache madison elements-endpoint-protection sudo apt install elements-endpoint-protection=<VERSION_BEFORE_17> sudo apt-mark hold elements-endpoint-protection

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list elements-endpoint-protection sudo dnf downgrade elements-endpoint-protection-<VERSION_BEFORE_17> sudo dnf versionlock add elements-endpoint-protection

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2024-23764?

client security: downgrade or apply the listed mitigation; server security: downgrade or apply the listed mitigation; email and server security: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2024-23764 being exploited?

CVE-2024-23764 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2024-23764 affect?

CVE-2024-23764 affects client security, server security, email and server security. Severity is medium (CVSS 6.7). Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and Server Security 15 and later, and WithSecure Elements Endpoint

How urgent is CVE-2024-23764?

Priority 25/100. No elevated risk signals yet.

Related CVEs

CVE-2024-4454 HIGH 7.8 DOWNGRADE DOWNGRADE WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability
CVE-2023-47264 HIGH 7.5 DOWNGRADE DOWNGRADE Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a den
CVE-2023-47263 HIGH 7.5 DOWNGRADE DOWNGRADE Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE3
CVE-2023-47172 HIGH 7.8 DOWNGRADE DOWNGRADE Certain WithSecure products allow Local Privilege Escalation
CVE-2023-43767 HIGH 7.5 DOWNGRADE DOWNGRADE Certain WithSecure products allow Denial of Service via the aepack archive unpack handler

References

← Back to latest CVEs