Read the docs

Kaspersky

Records77All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

Kaspersky records in CISA KEV

No Kaspersky vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Internet Security · all components

Priority MEDIUM 45

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01505 Published 2017-08-25 No fix listed CWE-732
Priority LOW 31

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequatel…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02149 Published 2019-11-26 No fix listed CWE-601
Priority LOW 26

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0057 Published 2017-01-06 No fix listed CWE-20
Priority LOW 25

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00501 Published 2017-01-06 No fix listed CWE-284
Priority LOW 25

A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00486 Published 2017-01-06 No fix listed CWE-284
Priority LOW 25

A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00486 Published 2017-01-06 No fix listed CWE-284
Priority LOW 24

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00225 Published 2021-04-01 Fixed in 21.1 CWE-863
Priority LOW 24

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpag…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.02211 Published 2019-07-18 No fix listed CWE-200
Open these records in search →