Read the docs
TI-2020-15304 Aliases CVE-2020-25044GHSA-7pp4-qxpv-rc2r

Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file…

Priority LOW 31Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any file in the system.

Why it matters now

EPSS 0.00337 27th percentileScored 2026-11-07
Fix Fixed Kaspersky Virus Removal Tool: 15.0.23.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Kaspersky Virus Removal Toolbefore 15.0.23.015.0.23.0Patch availableCNA
  • Kaspersky Virus Removal Tool Vendor— Affected before 15.0.23.0 Fixed in 15.0.23.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:kaspersky:virus_removal_tool:*:*:*:*:*:*:*:*before 15.0.23.0VulnerableKaspersky
  • cpe:2.3:a:kaspersky:virus_removal_tool:*:*:*:*:*:*:*:* Versions before 15.0.23.0 Vulnerable ·Kaspersky

Remediation

  • Fix · CNA Kaspersky Virus Removal Tool Fixed in 15.0.23.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-25044
  2. 2026-10-03 Alias added: GHSA-7pp4-qxpv-rc2r

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences