# cve.now: Kaspersky

The newest entries naming Kaspersky as an affected vendor (up to 200), of 29 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-88941](https://cve.now/CVE-2026-88941.md): Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. (CVSS 6.2)
- [CVE-2025-64984](https://cve.now/CVE-2025-64984.md): Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), K (CVSS 5.1)
- [CVE-2024-13614](https://cve.now/CVE-2024-13614.md): Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky E (CVSS 5.3)
- [CVE-2023-23349](https://cve.now/CVE-2023-23349.md): Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled cr (CVSS 2.2)
- [CVE-2024-1619](https://cve.now/CVE-2024-1619.md): Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. (CVSS 6.1)
- [CVE-2020-35929](https://cve.now/CVE-2020-35929.md): In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of (no CVSS)
- [CVE-2019-15695](https://cve.now/CVE-2019-15695.md): TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor. (no CVSS)
- [CVE-2019-15694](https://cve.now/CVE-2019-15694.md): TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. (no CVSS)
- [CVE-2019-15693](https://cve.now/CVE-2019-15693.md): TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. (no CVSS)
- [CVE-2019-15692](https://cve.now/CVE-2019-15692.md): TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. (no CVSS)
- [CVE-2019-15691](https://cve.now/CVE-2019-15691.md): TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder (no CVSS)
- [CVE-2019-15689](https://cve.now/CVE-2019-15689.md): Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E h (no CVSS)
- [CVE-2019-15687](https://cve.now/CVE-2019-15687.md): Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas (no CVSS)
- [CVE-2019-15686](https://cve.now/CVE-2019-15686.md): Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas (no CVSS)
- [CVE-2019-15685](https://cve.now/CVE-2019-15685.md): Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas (no CVSS)
- [CVE-2019-15688](https://cve.now/CVE-2019-15688.md): Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kas (no CVSS)
- [CVE-2019-15684](https://cve.now/CVE-2019-15684.md): Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remo (no CVSS)
- [CVE-2019-15683](https://cve.now/CVE-2019-15683.md): TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. (no CVSS)
- [CVE-2019-15680](https://cve.now/CVE-2019-15680.md): TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). (no CVSS)
- [CVE-2019-15679](https://cve.now/CVE-2019-15679.md): TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. (no CVSS)
- [CVE-2019-15678](https://cve.now/CVE-2019-15678.md): TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. (no CVSS)
- [CVE-2019-8287](https://cve.now/CVE-2019-8287.md): TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. (no CVSS)
- [CVE-2019-15681](https://cve.now/CVE-2019-15681.md): LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker t (no CVSS)
- [CVE-2019-8286](https://cve.now/CVE-2019-8286.md): Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially (no CVSS)
- [CVE-2016-4329](https://cve.now/CVE-2016-4329.md): A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. (no CVSS)
- [CVE-2016-4307](https://cve.now/CVE-2016-4307.md): A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. (no CVSS)
- [CVE-2016-4306](https://cve.now/CVE-2016-4306.md): Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. (no CVSS)
- [CVE-2016-4305](https://cve.now/CVE-2016-4305.md): A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. (no CVSS)
- [CVE-2016-4304](https://cve.now/CVE-2016-4304.md): A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/kaspersky
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
