Vulnerabilities > Kaspersky > Internet Security

DATE CVE VULNERABILITY TITLE RISK
2022-04-01 CVE-2021-27223 Unspecified vulnerability in Kaspersky products
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security.
local
low complexity
kaspersky
2.1
2022-04-01 CVE-2022-27534 Unspecified vulnerability in Kaspersky products
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code.
network
low complexity
kaspersky
7.5
2021-04-01 CVE-2021-26718 Incorrect Authorization vulnerability in Kaspersky Internet Security
KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection.
local
low complexity
kaspersky CWE-863
2.1
2019-11-26 CVE-2019-15688 Open Redirect vulnerability in Kaspersky products
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site.
network
kaspersky CWE-601
5.8
2019-11-26 CVE-2019-15687 Information Exposure vulnerability in Kaspersky products
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component was vulnerable to remote disclosure of various information about the user's system (like Windows version and version of the product, host unique ID).
network
kaspersky CWE-200
4.3
2019-11-26 CVE-2019-15686 Unspecified vulnerability in Kaspersky products
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable various anti-virus protection features.
network
kaspersky
5.8
2019-11-26 CVE-2019-15685 Unspecified vulnerability in Kaspersky products
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable such product's security features as private browsing and anti-banner.
network
kaspersky
4.3
2019-07-18 CVE-2019-8286 Information Exposure vulnerability in Kaspersky products
Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link).
network
kaspersky CWE-200
4.3
2017-08-25 CVE-2017-12817 Missing Encryption of Sensitive Data vulnerability in Kaspersky Internet Security 11.12.4.1622
In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.
network
low complexity
kaspersky CWE-311
5.0
2017-08-25 CVE-2017-12816 Incorrect Permission Assignment for Critical Resource vulnerability in Kaspersky Internet Security 11.12.4.1622
In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC.
network
low complexity
kaspersky CWE-732
7.5