KA
Vendor
Kaspersky
118
CVEs
0
On KEV
2
New 30D
Products
AS5.2
Administration Server
Kaspersky
1 CVEs0 on KEV1 new
NA5.2
Network Agent
Kaspersky
1 CVEs0 on KEV1 new
KA5.3
Kaspersky Anti-Virus
Kaspersky
17 CVEs0 on KEV0 new
IS9.8
Internet Security
Kaspersky
14 CVEs0 on KEV0 new
TS9.8
Total Security
Kaspersky
10 CVEs0 on KEV0 new
AN9.8
Anti-virus
Kaspersky
8 CVEs0 on KEV0 new
SC9.8
Security Cloud
Kaspersky
7 CVEs0 on KEV0 new
SO9.8
Small Office Security
Kaspersky
7 CVEs0 on KEV0 new
KI6.7
Kaspersky Internet Security
Kaspersky
6 CVEs0 on KEV0 new
AF9.8
Anti-virus For Linux Server
Kaspersky
4 CVEs0 on KEV0 new
ES9.8
Endpoint Security
Kaspersky
4 CVEs0 on KEV0 new
SM9.8
Secure Mail Gateway
Kaspersky
4 CVEs0 on KEV0 new
PM7.8
Password Manager
Kaspersky
3 CVEs0 on KEV0 new
TI9.8
Tinycheck
Kaspersky
3 CVEs0 on KEV0 new
VS7.8
Vpn Secure Connection
Kaspersky
2 CVEs0 on KEV0 new
AT7.8
Anti-ransomware Tool
Kaspersky
1 CVEs0 on KEV0 new
AE8.8
Antivirus Engine
Kaspersky
1 CVEs0 on KEV0 new
ES7.8
Embedded Systems Security
Kaspersky
1 CVEs0 on KEV0 new
FA4.3
Free Anti-virus
Kaspersky
1 CVEs0 on KEV0 new
KA5.3
Kaspersky Anti-Ransomware Tool
Kaspersky
1 CVEs0 on KEV0 new
KA–
Kaspersky Anti-virus Scanner
Kaspersky
1 CVEs0 on KEV0 new
KA5.3
Kaspersky Anti-Virus SDK for Windows
Kaspersky
1 CVEs0 on KEV0 new
KE6.1
Kaspersky Endpoint Security
Kaspersky
1 CVEs0 on KEV0 new
KE5.3
Kaspersky Endpoint Security for Windows
Kaspersky
1 CVEs0 on KEV0 new
KF5.3
Kaspersky for Windows (Standard, Plus, Premium)
Kaspersky
1 CVEs0 on KEV0 new
KF5.3
Kaspersky Free
Kaspersky
1 CVEs0 on KEV0 new
KI6.1
Kaspersky Industrial CyberSecurity for Linux Nodes
Kaspersky
1 CVEs0 on KEV0 new
KI–
Kaspersky Internet Security 2010
Kaspersky
1 CVEs0 on KEV0 new
KO–
Kaspersky Online Scanner
Kaspersky
1 CVEs0 on KEV0 new
KS5.3
Kaspersky Safe Kids
Kaspersky
1 CVEs0 on KEV0 new
KS5.3
Kaspersky Security Cloud
Kaspersky
1 CVEs0 on KEV0 new
KS5.3
Kaspersky Security for Virtualization Light Agent
Kaspersky
1 CVEs0 on KEV0 new
KS5.3
Kaspersky Small Office Security
Kaspersky
1 CVEs0 on KEV0 new
PR4.3
Protection
Kaspersky
1 CVEs0 on KEV0 new
RD6.8
Rescue Disk
Kaspersky
1 CVEs0 on KEV0 new
SB5.9
Safe Browser
Kaspersky
1 CVEs0 on KEV0 new
SC6.7
Secure Connection
Kaspersky
1 CVEs0 on KEV0 new
SE8.8
Security
Kaspersky
1 CVEs0 on KEV0 new
SC7.8
Security Center
Kaspersky
1 CVEs0 on KEV0 new
SC7.8
Security Center Web Console
Kaspersky
1 CVEs0 on KEV0 new
TS–
Total Security 2015
Kaspersky
1 CVEs0 on KEV0 new
VR7.1
Virus Removal Tool
Kaspersky
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-88941 New | NA Network Agent Kaspersky | 5.2 | Oct 29 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center |
| CVE-2025-64984 | KE Kaspersky Endpoint Security Kaspersky | 6.1 | Nov 20 | Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial CyberSecurity for… |
| CVE-2024-13614 | KA Kaspersky Anti-Virus SDK for Windows Kaspersky | 5.3 | Feb 6 | Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky… |
| CVE-2024-1619 | SE Security Kaspersky | 8.8 | Feb 29 | Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server |
| CVE-2022-27535 | VS Vpn Secure Connection Kaspersky | 7.8 | Aug 5 | Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the… |
| CVE-2022-27534 | AN Anti-virus Kaspersky | 9.8 | Apr 1 | Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially… |
| CVE-2021-27223 | AN Anti-virus Kaspersky | 5.5 | Apr 1 | A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security |
| CVE-2021-35052 | PM Password Manager Kaspersky | 7.8 | Nov 23 | A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High |
| CVE-2021-35053 | ES Endpoint Security Kaspersky | 7.5 | Nov 3 | Possible system denial of service in case of arbitrary changing Firefox browser parameters |
| CVE-2020-27020 | PM Password Manager Kaspersky | 7.5 | May 14 | Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some… |
| CVE-2021-26718 | IS Internet Security Kaspersky | 5.5 | Apr 1 | KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection |
| CVE-2020-26200 | ES Endpoint Security Kaspersky | 6.8 | Feb 26 | A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity |
| CVE-2020-36200 | TI Tinycheck Kaspersky | 6.5 | Jan 26 | TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs |
| CVE-2020-36199 | TI Tinycheck Kaspersky | 9.8 | Jan 26 | TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places |
| CVE-2020-35929 | TI Tinycheck Kaspersky | 9.8 | Jan 19 | In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool |
| CVE-2020-28950 | AT Anti-ransomware Tool Kaspersky | 7.8 | Dec 4 | The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during… |
| CVE-2020-25045 | SC Security Center Kaspersky | 7.8 | Sep 2 | Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an… |
| CVE-2020-25044 | VR Virus Removal Tool Kaspersky | 7.1 | Sep 2 | Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any… |
| CVE-2020-25043 | VS Vpn Secure Connection Kaspersky | 7.1 | Sep 2 | The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system |
| CVE-2019-15689 | KI Kaspersky Internet Security Kaspersky | 6.7 | Dec 2 | Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to… |
| CVE-2019-15688 | AN Anti-virus Kaspersky | 6.1 | Nov 26 | Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the… |
| CVE-2019-15687 | AN Anti-virus Kaspersky | 6.5 | Nov 26 | Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the… |
| CVE-2019-15686 | AN Anti-virus Kaspersky | 4.3 | Nov 26 | Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the… |
| CVE-2019-15685 | AN Anti-virus Kaspersky | 4.3 | Nov 26 | Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the… |
| CVE-2019-15684 | PR Protection Kaspersky | 4.3 | Nov 25 | Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other… |
| CVE-2019-8286 | AN Anti-virus Kaspersky | 4.3 | Jul 18 | Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing… |
| CVE-2019-8285 | AE Antivirus Engine Kaspersky | 8.8 | May 8 | Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary code execution |
| CVE-2018-6306 | PM Password Manager Kaspersky | 7.8 | Apr 19 | Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538 |
| CVE-2018-6291 | SM Secure Mail Gateway Kaspersky | 6.1 | Feb 6 | WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1 |
| CVE-2018-6290 | SM Secure Mail Gateway Kaspersky | 7.8 | Feb 6 | Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1 |
| CVE-2018-6289 | SM Secure Mail Gateway Kaspersky | 9.8 | Feb 6 | Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1 |
| CVE-2018-6288 | SM Secure Mail Gateway Kaspersky | 8.8 | Feb 6 | Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1 |
| CVE-2017-12823 | ES Embedded Systems Security Kaspersky | 7.8 | Dec 8 | Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation |
| CVE-2017-12817 | IS Internet Security Kaspersky | 7.5 | Aug 25 | In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted |
| CVE-2017-12816 | IS Internet Security Kaspersky | 9.8 | Aug 25 | In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get… |
| CVE-2017-9813 | AF Anti-virus For Linux Server Kaspersky | 6.1 | Jul 17 | In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the licenseKeyInfo action method is… |
| CVE-2017-9812 | AF Anti-virus For Linux Server Kaspersky | 7.5 | Jul 17 | The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix… |
| CVE-2017-9811 | AF Anti-virus For Linux Server Kaspersky | 9.8 | Jul 17 | The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) |
| CVE-2017-9810 | AF Anti-virus For Linux Server Kaspersky | 8.8 | Jul 17 | There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) |
| CVE-2016-4329 | AN Anti-virus Kaspersky | 5.5 | Jan 6 | A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software |
| CVE-2016-4307 | IS Internet Security Kaspersky | 5.5 | Jan 6 | A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver |
| CVE-2016-4306 | TS Total Security Kaspersky | 5.5 | Jan 6 | Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver |
| CVE-2016-4305 | IS Internet Security Kaspersky | 5.5 | Jan 6 | A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver |
| CVE-2016-4304 | IS Internet Security Kaspersky | 5.5 | Jan 6 | A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver |
| CVE-2016-6231 | SB Safe Browser Kaspersky | 5.9 | Aug 25 | Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted… |
| CVE-2015-8579 | TS Total Security 2015 Kaspersky | – | Dec 16 | Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows… |
| CVE-2014-5654 | KI Kaspersky Internet Security Kaspersky | – | Sep 9 | The Kaspersky Internet Security (aka com.kms.free) application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… |
| CVE-2010-5163 | KI Kaspersky Internet Security 2010 Kaspersky | – | Aug 25 | Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise… |
| CVE-2012-1462 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0,… |
| CVE-2012-1461 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus… |
| CVE-2012-1459 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus… |
| CVE-2012-1457 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal… |
| CVE-2012-1456 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus… |
| CVE-2012-1453 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee… |
| CVE-2012-1446 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman… |
| CVE-2012-1443 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint… |
| CVE-2012-1442 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky… |
| CVE-2012-1425 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0,… |
| CVE-2012-1420 | KA Kaspersky Anti-virus Kaspersky | – | Mar 21 | The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565,… |
| CVE-2009-4114 | KA Kaspersky Anti-virus Kaspersky | – | Nov 30 | kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to… |
