Read the docs
TI-2019-11768 Aliases CVE-2019-15684GHSA-932q-p83p-pj88

Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was…

Priority LOW 20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions.

Why it matters now

EPSS 0.00387 33rd percentileScored 2026-11-07
Fix Fixed Kaspersky Protection extension for Google Chrome (Kaspersky): 30.112.62.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
KasperskyKaspersky Protection extension for Google Chromebefore 30.112.62.030.112.62.0Patch availableCNA
  • Kaspersky Protection extension for Google Chrome VendorKaspersky Affected before 30.112.62.0 Fixed in 30.112.62.0 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*before 30.112.62.0VulnerableGoogle
cpe:2.3:a:kaspersky:protection:20.0.543.1418:*:*:*:*:chrome:*:*20.0.543.1418VulnerableKaspersky
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions before 30.112.62.0 Vulnerable ·Google
  • cpe:2.3:a:kaspersky:protection:20.0.543.1418:*:*:*:*:chrome:*:* Versions 20.0.543.1418 Vulnerable ·Kaspersky

Remediation

  • Fix · CNA Kaspersky Protection extension for Google Chrome (Kaspersky) Fixed in 30.112.62.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-15684
  2. 2026-10-03 Alias added: GHSA-932q-p83p-pj88

References

Advisory 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences