PatchTheCVEwithsecure vulnerabilities
Recent CVEs affecting withsecure products. 5 tracked.
withsecure has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-22. Highest priority: CVE-2023-47264 (score 50/100).
- CVE-2024-4454 HIGH 7.8 DOWNGRADE DOWNGRADE WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability
- CVE-2024-23764 MEDIUM 6.7 DOWNGRADE DOWNGRADE Certain WithSecure products allow Local Privilege Escalation
- CVE-2023-47264 HIGH 7.5 DOWNGRADE DOWNGRADE Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a den
- CVE-2023-47263 HIGH 7.5 DOWNGRADE DOWNGRADE Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE3
- CVE-2023-47172 HIGH 7.8 DOWNGRADE DOWNGRADE Certain WithSecure products allow Local Privilege Escalation
FAQ
How do I fix withsecure vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is withsecure being exploited right now?
None of the tracked withsecure CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which withsecure CVE should I patch first?
CVE-2023-47264 currently ranks highest (50/100): Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a den.