Vulnerability · Published Apr 1, 2022 · Assigned by Kaspersky
CVE-2022-27534
Critical 9.8
In plain English
A critical-severity security flaw in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.1% (higher than 88% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)3.1%top 12.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security | with antivirus databases released before 12.03.2022 |