CVE Feed

    Dashboard / CVE / CVE-2022-27534

    CVE-2022-27534

    Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies).

    Published:Apr 1, 2022
    Last Modified:Nov 21, 2024
    EPS:Apr 1, 2022
    EPSS Score:0.00577
    CVSS Score:9.8

    Affected Products

    Vendor
    Kaspersky
    Product
    Anti-virus
    Vendor
    Kaspersky
    Product
    Endpoint Security
    Vendor
    Kaspersky
    Product
    Internet Security
    Vendor
    Kaspersky
    Product
    Security Cloud
    Vendor
    Kaspersky
    Product
    Small Office Security
    Vendor
    Kaspersky
    Product
    Total Security

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-27223 (CVSS 5.5) — A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for…
    CVE-2019-15687 (CVSS 6.5) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15686 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15685 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15688 (CVSS 6.1) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-8286 (CVSS 4.3) — Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions…
    CVE-2016-4329 (CVSS 5.5) — A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High