Sign inStart freeBook a demo

Kaspersky Lab vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Kaspersky Lab has 38 published vulnerabilities across 15 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Kaspersky Anti-Virus, with 28. If you run Kaspersky Lab software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Kaspersky Lab products have the most vulnerabilities?

Kaspersky Anti-Virus leads with 28 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Kaspersky Anti-Virus28
  2. Kaspersky Internet Security10
  3. Kaspersky Anti-Virus Personal5
  4. Kaspersky Anti-Hacker2
  5. Kaspersky Anti-Spam2
  6. Kaspersky Antivirus Engine2
  7. Kaspersky Anti-Virus Personal Pro2
  8. Kaspersky Anti-Virus 20101
  9. Online Scanner1
  10. Kaspersky Anti-Virus 20091
Published vulnerabilities
Known exploited

Which Kaspersky Lab vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Kaspersky Lab's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Kaspersky Lab flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 64%
    CVE-2004-0932High

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local...

    CVSS7.5Published27 Jan 2005
  2. 42%
    CVE-2005-3142Critical

    Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header.

    CVSS10.0Published5 Oct 2005
  3. 19%
    CVE-2004-1096High

    Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero,...

    CVSS7.5Published10 Jan 2005
  4. 15%
    CVE-2004-0935High

    Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed...

    CVSS7.5Published27 Jan 2005
  5. 15%
    CVE-2004-0934High

    Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a...

    CVSS7.5Published27 Jan 2005
  6. 15%
    CVE-2004-0937High

    Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to...

    CVSS7.5Published9 Feb 2005
  7. 15%
    CVE-2004-0936High

    RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

    CVSS7.5Published27 Jan 2005
  8. 8.9%
    CVE-2007-0445Critical

    Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2...

    CVSS10.0Published6 Apr 2007
  9. 4.9%
    CVE-2007-1112Critical

    Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote...

    CVSS10.0Published6 Apr 2007
Every product

All Kaspersky Lab products we track.

12 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 12 Kaspersky Lab products with at least one tracked version, of 15 in our catalogue.

Precursor Intelligence

Running Kaspersky Lab? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 38 published vulnerabilities across 15 products and 38 versions from Kaspersky Lab.

None of Kaspersky Lab's vulnerabilities is on the list of flaws known to be exploited today.

Kaspersky Anti-Virus, with 28 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Kaspersky Lab products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring