Skip to content

Vendor

k7computing vulnerabilities

60 published CVES affecting k7computing, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
60
Critical
6
High
38
Medium
16
Low
0
Unscored
0
CISA KEV
0
Atom feed of k7computing alerts

Products

Latest k7computing CVEs

Newest publication first · page 2 of 3

  1. HighCVSS 7.1 EPSS 1.2% PoC

    In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory....

  2. HighCVSS 7.2 EPSS 1.0% Public exploit

    K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025...

  3. HighCVSS 7.2 EPSS 0.63%

    Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via unspecified vectors.

  4. MediumCVSS 4.9 EPSS 0.47%

    The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer dereference) as demonstrated by a filename containing "crashme$$".

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.