What’s Vulnerable › Vulnerabilities

CVE-2022-28881: Denial-of-Service (DoS) Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-10 · updated 2026-06-17

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected products

• F-Secure All F-Secure Endpoint Protection products on Windows and Mac F-Secure Linux Security (32-bit) F-Secure Linux Se: all versions
• F-Secure Cloud Protection For Salesforce: all versions
• F-Secure Elements Collaboration Protection: all versions
• F-Secure Elements Endpoint Detection And Response: all versions
• F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection Products for Windows: all versions
• F-Secure Internet Gatekeeper: all versions
• F-Secure Linux Security: all versions
• F-Secure Linux Security 64: all versions

References

• https://www.f-secure.com/en/business/support-and-downloads/security-advisories
• https://www.withsecure.com/en/support/security-advisories
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories
• https://www.withsecure.com/en/support/security-advisories

Get alerted when CVE-2022-28881 or the next vulnerability affects your stack