CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

• https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40837Vendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40837Vendor Advisory

Published

Feb 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40831The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js …7.2
• CVE-2021-40832A Denial-of-Service (DoS) vulnerability was discovered in F-…6.5
• CVE-2021-40833A vulnerability affecting F-Secure antivirus engine was disc…5.5
• CVE-2021-40834A user interface overlay vulnerability was discovered in F-s…4.3
• CVE-2021-40835An URL Address bar spoofing vulnerability was discovered in …4.3
• CVE-2021-40836A vulnerability affecting F-Secure antivirus engine was disc…5.5
• CVE-2021-40839The rencode package through 1.0.6 for Python allows an infin…7.5
• CVE-2021-4084pimcore is vulnerable to Improper Neutralization of Input Du…6.1
• CVE-2021-40840A Stored XSS issue exists in the admin/users user administra…5.4
• CVE-2021-40841A Path Traversal vulnerability for a log file in LiveConfig …6.5
• CVE-2021-40842Proofpoint Insider Threat Management Server contains a SQL i…9.8
• CVE-2021-40843Proofpoint Insider Threat Management Server contains an unsa…7.3