2063 matches found
Kaspersky Security Center DoS
The vulnerability in the Agent Administration module and the Server Administration module of Kaspersky Security Center, Kaspersky Security Center Cloud Console, and Kaspersky Endpoint Security Cloud is related to a lack of authentication for a critical function. Exploitation of this vulnerability...
shadowhammer
Batch-mode shadowhammer MAC address checker Kaspersky recently discovered and analysed the 'Shadowhammer' attack https://securelist.com/operation-shadowhammer/89992. They did some great analysis and released a tool for sysadmins to use to determine if their systems were targetted. The released...
KasperMeow
Kaspersky arkmon.sys KASLR Bypass via Kernel Debug Log Leak Kaspersky's anti-rootkit monitor driver arkmon.sys stores a kernel debug log containing raw kernel pointers. The log is "encrypted" with XOR 0xCC + ROT13 - trivially reversible. Any admin user can read and decrypt this log via IOCTL,...
leHACK-Analysis-of-CVE-2018-8453
leHACK 2019: Analyzing CVE-2018-8453: An interesting tale of UAF and Double Free in Windows Kernel This talk was delivered at leHACK 2019 Abstract In this talk, we discuss intricate details of exploitation of CVE-2018-8453, a vulnerability in win32.sys Microsoft Windows driver. It which was...
EvilKaspersky
This is an old experiment I did year ago and now just saw the repo and decided to make it public. It is KasperkyHook, but the syscalls directly point onto functions useful for interprocess memory copying. You can fully unload the control driver afterwards and erase its memory. Another advantage i...
CVE-2026-88941
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...
CVE-2026-88941
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...
CVE-2026-88941
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...
CVE-2026-88941
Kaspersky addressed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center . The flaw, categorized under CWE-306 (Missing Authentication for Critical Function) , could potentially cause the Network Agent module to malfunction . No evidence of in-the-wild exploitation...
EUVD-2026-112680
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...
Kaspersky Network Agent authorization issue vulnerability
Versions 16.3.0.1207, 16.2.0.1477, 16.2.0.1023, 16.2.0.917, 16.1.0.6517, 16.0.0.254, 15.4.0.8952, 15.3.0.392, 15.2.0.442, 15.1.0.20748, 15.1.0.11795, 14.0.0.20023, and 10.5.1781 of Kaspersky Network Agent, as well as versions 15.1.0.22239 and 15.1.0.20748 of Kaspersky Administration Server, conta...
PT-2026-130673
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...
CVE-2026-88941: Kaspersky: Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...
Deploying AI agents securely: how Kaspersky products mitigate AI threats
Introduction AI agents and associated tooling are becoming increasingly common in corporate infrastructure. Agents can perform a range of actions with the user's privileges, such as accessing data, running commands, and interacting with external services. This creates new security risks, especial...
Kaspersky Lab Buffer Overflow
The vulnerability of “Labyrinth Kasper” antivirus protection is related to the operation going beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of the product...
HardBreacher
HardBreacher Kaspersky Antivirus For Endpoint のゼロデイ権限昇格の脆弱性 この問題は今やMicrosoftの外にも漏れ出しています。ホーム版か商用版のどちらかにバグを見つけるかという投票が行われ、投票結果は商用版となりました。 これを書いている時点で、この概念実証は完全にパッチが適用されたWindows 11 25H2とKaspersky for Endpoint v14.0.0.504で動作します。...
MINI-Q9CW-W6X8-GP8P
Bulletin has no description...
CGA-G5WW-FJX6-X7V3
Bulletin has no description...
Kaspersky Endpoint Security GUI Bypass DoS
The vulnerability of the graphical user interface of Kaspersky Endpoint Security’s antivirus protection for Windows relates to insecure temporary files. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms and cause partial service interruption...
