CVE Feed

    Dashboard / CVE / CVE-2021-27223

    CVE-2021-27223

    A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS

    Published:Apr 1, 2022
    Last Modified:Nov 21, 2024
    EPS:Apr 1, 2022
    EPSS Score:0.00048
    CVSS Score:5.5

    Affected Products

    Vendor
    Kaspersky
    Product
    Anti-virus
    Vendor
    Kaspersky
    Product
    Endpoint Security
    Vendor
    Kaspersky
    Product
    Internet Security
    Vendor
    Kaspersky
    Product
    Security Cloud
    Vendor
    Kaspersky
    Product
    Small Office Security
    Vendor
    Kaspersky
    Product
    Total Security

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-27534 (CVSS 9.8) — Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released befor…
    CVE-2019-15687 (CVSS 6.5) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15686 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15685 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15688 (CVSS 6.1) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-8286 (CVSS 4.3) — Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions…
    CVE-2016-4329 (CVSS 5.5) — A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High