Kaspersky Internet Security

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-15689 Dec 02, 21:15 MEDIUM POC This Month

Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation RCE Information Disclosure Total Security Kaspersky Internet Security +3

NVD

CVSS 3.1

6.7

EPSS

0.8%

CVE-2014-5654 Sep 09, 01:55 MEDIUM This Month

The Kaspersky Internet Security (aka com.kms.free) application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Kaspersky Internet Security Kaspersky

NVD

CVSS 2.0

5.4

EPSS

0.0%

CVE-2019-15689

EPSS 1% CVSS 6.7

MEDIUM POC This Month

Privilege Escalation RCE Information Disclosure +5

NVD

CVE-2014-5654

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Kaspersky Internet Security +1

NVD