The vulnerability of the web protection component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud allows a malicious actor to disable certain security functions of the product, such as private browsing and antivirus protection.

Web protection flaw in Kaspersky products allows attackers to disable private browsing and antivirus due to input validation issues.

Reporter	Title	Published	Views	Family All 11
CNVD	Multiple Kaspersky Products Input Validation Error Vulnerabilities	28 Nov 201900:00	–	cnvd
CVE	CVE-2019-15685	26 Nov 201915:44	–	cve
Cvelist	CVE-2019-15685	26 Nov 201915:44	–	cvelist
EUVD	EUVD-2019-6624	7 Oct 202500:30	–	euvd
Hacker One	Kaspersky: Unauthorized command execution in Web protection component of Anti-Virus products family	21 Dec 201810:06	–	hackerone
Hacker One	Kaspersky: Unauthorized command execution in Web protection component of Anti-Virus products family [IE]	21 Dec 201810:28	–	hackerone
Hacker One	Kaspersky: Unauthorized command execution in Web protection component of Anti-Virus products family [FF, Chrome]	21 Dec 201811:05	–	hackerone
NVD	CVE-2019-15685	26 Nov 201916:15	–	nvd
OSV	CVE-2019-15685	26 Nov 201916:15	–	osv
Prion	Security feature bypass	26 Nov 201916:15	–	prion