Kaspersky vulnerabilities
29 CVEs and advisories name Kaspersky as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-88941Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center.
- CVE-2025-64984Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), K
- CVE-2024-13614Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky E
- CVE-2023-23349Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled cr
- CVE-2024-1619Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server.
- CVE-2020-35929In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of
- CVE-2019-15695TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor.
- CVE-2019-15694TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect.
- CVE-2019-15693TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient.
- CVE-2019-15692TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow.
- CVE-2019-15691TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder
- CVE-2019-15689Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E h
- CVE-2019-15687Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas
- CVE-2019-15686Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas
- CVE-2019-15685Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas
- CVE-2019-15688Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas
- CVE-2019-15684Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remo
- CVE-2019-15683TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e.
- CVE-2019-15680TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS).
- CVE-2019-15679TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.
- CVE-2019-15678TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution..
- CVE-2019-8287TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution.
- CVE-2019-15681LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker t
- CVE-2019-8286Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially
- CVE-2016-4329A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software.
- CVE-2016-4307A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.
- CVE-2016-4306Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver.
- CVE-2016-4305A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver.
- CVE-2016-4304A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver.