VULNERABILITY INTELLIGENCE

CVE-2022-28877

CVSS score4.3 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2022-07-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Description

This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references