Priority MEDIUM 48
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03133 · Published 2022-04-01 · No fix listed
Priority MEDIUM 45
In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01505 · Published 2017-08-25 · No fix listed CWE-732
Priority LOW 34
In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00861 · Published 2017-08-25 · No fix listed CWE-311
Priority LOW 32
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component was vulnerable to…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01618 · Published 2019-11-26 · No fix listed
Priority LOW 31
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequatel…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02149 · Published 2019-11-26 · No fix listed CWE-601
Priority LOW 26
A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0057 · Published 2017-01-06 · No fix listed CWE-20
Priority LOW 25
A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00501 · Published 2017-01-06 · No fix listed CWE-284
Priority LOW 25
A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00486 · Published 2017-01-06 · No fix listed CWE-284
Priority LOW 25
A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00486 · Published 2017-01-06 · No fix listed CWE-284
Priority LOW 24
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2022-04-01 · No fix listed
Priority LOW 24
KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2021-04-01 · Fixed in 21.1 CWE-863
Priority LOW 24
Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpag…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02211 · Published 2019-07-18 · No fix listed CWE-200
Priority LOW 22
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attack…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00844 · Published 2019-11-26 · No fix listed
Priority LOW 21
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attack…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0077 · Published 2019-11-26 · No fix listed