« Back to list

CVE-2022-27534

Status: ModifiedCritical (9.8)—

Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies).

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (6)

Kaspersky — Anti-virusKaspersky — Endpoint SecurityKaspersky — Internet SecurityKaspersky — Security CloudKaspersky — Small Office SecurityKaspersky — Total Security

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2022-27534",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "vulnerability@kaspersky.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security",
          "versions": [
            {
              "status": "affected",
              "version": "with antivirus databases released before 12.03.2022"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-04-01T23:15:14.747",
  "references": [
    {
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310322_2",
      "tags": [
        "Broken Link"
      ],
      "source": "vulnerability@kaspersky.com"
    },
    {
      "url": "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310322_2",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies)."
    },
    {
      "lang": "es",
      "value": "Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases lanzados antes del 12 de marzo de 2022, tenían un error en un módulo de análisis de datos que potencialmente permitía a un atacante ejecutar código arbitrario. La corrección fue realizada de forma automática. Créditos: Georgy Zaytsev (Positive Technologies)"
    }
  ],
  "lastModified": "2026-06-17T04:37:10.820",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kaspersky:anti-virus:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BAFD804-D268-40E2-9EAE-FAC4B370985A",
              "versionEndExcluding": "12.03.2022"
            },
            {
              "criteria": "cpe:2.3:a:kaspersky:endpoint_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54AFE429-3D4B-49D4-AC0D-FEDEB99A9187",
              "versionEndExcluding": "12.03.2022"
            },
            {
              "criteria": "cpe:2.3:a:kaspersky:internet_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72568879-E182-46DC-99D1-FFF4C133FB3F",
              "versionEndExcluding": "12.03.2022"
            },
            {
              "criteria": "cpe:2.3:a:kaspersky:security_cloud:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "247E7C3E-89E3-46D4-A12E-4DC322A057AE",
              "versionEndExcluding": "12.03.2022"
            },
            {
              "criteria": "cpe:2.3:a:kaspersky:small_office_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5D6EC78-AD45-4FE8-AEB3-48C76A394925",
              "versionEndExcluding": "12.03.2022"
            },
            {
              "criteria": "cpe:2.3:a:kaspersky:total_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E53C7C9C-8A52-4F39-AB0D-D906B5936D86",
              "versionEndExcluding": "12.03.2022"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vulnerability@kaspersky.com"
}