Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Priority LOW 24

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00225 Published 2021-04-01 Fixed in 21.1 CWE-863
Priority LOW 31

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequatel…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02149 Published 2019-11-26 No fix listed CWE-601
Priority LOW 24

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpag…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.02211 Published 2019-07-18 No fix listed CWE-200
Priority MEDIUM 45

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01505 Published 2017-08-25 No fix listed CWE-732
Priority LOW 26

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0057 Published 2017-01-06 No fix listed CWE-20
Priority LOW 25

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00501 Published 2017-01-06 No fix listed CWE-284
Priority LOW 25

A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00486 Published 2017-01-06 No fix listed CWE-284
Priority LOW 25

A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00486 Published 2017-01-06 No fix listed CWE-284