CVE-2022-28874: F-Secure Atlant

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Affected products

• F-Secure Atlant: any version
• F-Secure Elements Endpoint Protection: any version
• F-Secure Linux Security: any version
• Withsecure Cloud Protection For Salesforce: any version
• Withsecure Elements Collaboration Protection: any version

Published 2022-05-23. Last modified 2026-06-17.