kaspersky kaspersky-internet-security CVE-2019-15689 vulnerability in Kaspersky Products
Published on December 2, 2019

Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code via execution compromised file placed by an attacker with administrator rights. No privilege escalation. Possible whitelisting bypass some of the security products

NVD


Products Associated with CVE-2019-15689

Want to know whenever a new CVE is published for Kaspersky products? stack.watch will email you.

Kaspersky Internet Security
 
Kaspersky Secure Connection
 
Kaspersky Security Cloud
 
Kaspersky Total Security
 

Affected Versions

Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud Version prior to version 2020 patch E is affected by CVE-2019-15689

Exploit Probability

EPSS
0.06%
Percentile
17.21%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.