CVE-2022-28881: F-Secure Atlant

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected products

• F-Secure Atlant: any version
• F-Secure Cloud Protection For Salesforce: any version
• F-Secure Elements Collaboration Protection: any version
• F-Secure Elements Endpoint Detection And Response: any version
• F-Secure Elements Endpoint Protection: any version
• F-Secure Internet Gatekeeper: any version
• F-Secure Linux Security: any version
• F-Secure Linux Security 64: any version

Published 2022-08-10. Last modified 2026-06-17.