Medium severity4.3NVD Advisory· Published Jul 21, 2022· Updated Jun 17, 2026

CVE-2022-28877

Description

This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

F-Secure and WithSecure/All F-Secure and WithSecure Endpoint Protection Products for Windowsv5
Range: All Version
F-Secure/windows endpoint productsllm-create
WithSecure/windows endpoint productsllm-create
F-Secure/Elements Endpoint Protection
cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.f-secure.com/en/business/support-and-downloads/security-advisoriesnvdVendor Advisory
www.withsecure.com/en/support/security-advisoriesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000