Vulnerabilities > Kaspersky > Total Security
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-01 | CVE-2021-27223 | Unspecified vulnerability in Kaspersky products A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. | 5.5 |
| 2022-04-01 | CVE-2022-27534 | Unspecified vulnerability in Kaspersky products Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. | 9.8 |
| 2019-12-02 | CVE-2019-15689 | Exposure of Resource to Wrong Sphere vulnerability in Kaspersky products Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code via execution compromised file placed by an attacker with administrator rights. | 6.7 |
| 2019-11-26 | CVE-2019-15688 | Open Redirect vulnerability in Kaspersky products Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. | 6.1 |
| 2019-11-26 | CVE-2019-15687 | Unspecified vulnerability in Kaspersky products Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component was vulnerable to remote disclosure of various information about the user's system (like Windows version and version of the product, host unique ID). | 6.5 |
| 2019-11-26 | CVE-2019-15686 | Unspecified vulnerability in Kaspersky products Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable various anti-virus protection features. | 4.3 |
| 2019-11-26 | CVE-2019-15685 | Unspecified vulnerability in Kaspersky products Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable such product's security features as private browsing and anti-banner. | 4.3 |
| 2019-07-18 | CVE-2019-8286 | Information Exposure vulnerability in Kaspersky products Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). | 4.3 |
| 2017-01-06 | CVE-2016-4329 | Improper Input Validation vulnerability in Kaspersky Anti-Virus, Internet Security and Total Security A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. | 5.5 |
| 2017-01-06 | CVE-2016-4306 | Information Exposure vulnerability in Kaspersky Total Security 16.0.0.614 Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. | 5.5 |