K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.
Product
k7computing total security vulnerabilities
25 published CVES affecting k7computing total security, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 25
- Critical
- 0
- High
- 19
- Medium
- 6
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest k7computing total security CVEs
Newest publication first
-
HighCVSS 7.8
-
HighCVSS 7.8
K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local).
-
HighCVSS 7.8
K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.
-
HighCVSS 7.8
K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.
-
HighCVSS 7.8
K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). The component is: K7TSMngr.exe.
-
HighCVSS 7.8
K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process Execution (local). The component is: K7Sentry.sys.
-
CVE-2018-11246 K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak.
PublishedHighCVSS 7.5K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak.
-
HighCVSS 7.8
A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
HighCVSS 7.8
A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
MediumCVSS 5.5
An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
CVE-2018-11007 A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
PublishedMediumCVSS 5.5A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
MediumCVSS 5.5
An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
CVE-2018-11005 A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
PublishedMediumCVSS 5.5A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
MediumCVSS 5.5
In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.
-
HighCVSS 7.0
K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
-
MediumCVSS 5.5
In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations.
-
HighCVSS 7.0
K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
-
HighCVSS 7.8
K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
-
HighCVSS 7.0
K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
-
HighCVSS 7.8
K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
-
HighCVSS 7.0
K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
-
HighCVSS 7.8
K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
-
HighCVSS 7.8
K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
-
HighCVSS 7.1 PoC
In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory....
-
HighCVSS 7.2 Public exploit
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.