critical9.8
CVE-2022-27534
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing modul…
Impact
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kaspersky | Anti-Virus | before 12.03.2022 |
| Kaspersky | Endpoint Security | before 12.03.2022 |
| Kaspersky | Internet Security | before 12.03.2022 |
| Kaspersky | Security Cloud | before 12.03.2022 |
| Kaspersky | Small Office Security | before 12.03.2022 |
| Kaspersky | Total Security | before 12.03.2022 |