Approved changes feed: RSS · Atom

cpe:2.3:a:kaspersky:total_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKaspersky (0e3919d1-d2ab-5693-bce6-610f4c2052a6)
ProductTotal Security (0d3a81a6-4721-5c40-a926-93e4db1f78d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27534 vulnerable 2026-06-08 05:41:55.438734 Details available
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies).
Published: 2022-04-01T22:17:49.000Z
Updated: 2024-08-03T05:32:59.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27223 vulnerable 2026-06-08 05:30:46.134138 Details available
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS
Published: 2022-04-01T22:17:48.000Z
Updated: 2024-08-03T20:40:47.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8286 vulnerable 2026-06-08 05:14:23.810587 Details available
Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6
Published: 2019-07-18T18:34:15.000Z
Updated: 2024-08-04T21:17:30.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15688 vulnerable 2026-06-08 05:12:57.802766 Details available
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. Bypass.
Published: 2019-11-26T15:32:17.000Z
Updated: 2024-08-05T00:56:22.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15687 vulnerable 2026-06-08 05:12:57.802366 Details available
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component was vulnerable to remote disclosure of various information about the user's system (like Windows version and version of the product, host unique ID). Information Disclosure.
Published: 2019-11-26T15:45:17.000Z
Updated: 2024-08-05T00:56:22.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15686 vulnerable 2026-06-08 05:12:57.801917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15685 vulnerable 2026-06-08 05:12:57.801286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4329 vulnerable 2026-06-08 05:07:47.146219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4306 vulnerable 2026-06-08 05:07:47.120642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.