CVE-2019-8286 Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a spec...
MediumCVSS 4.3
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky anti-virus | <= 2019 | No fix listed |
| kaspersky free anti-virus | <= 2019 | No fix listed |
| kaspersky internet security | <= 2019 | No fix listed |
| kaspersky small office security | <= 6.0 | No fix listed |
| kaspersky total security | <= 2019 | No fix listed |
| Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security | = up to 2019 | No fix listed |
References
- 109300 third-party-advisory vdb-entry
- support.kaspersky.com vendor-advisory