CVE-2016-4306: Kaspersky Total Security

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially leaking sensitive information such as privileged tokens or kernel memory addresses that may be useful in bypassing kernel mitigations. An unprivileged user can run a program from user-mode to trigger this vulnerability.

Affected products

• Kaspersky Total Security: version 16.0.0.614 only

Published 2017-01-06. Last modified 2026-06-17.