CVE-2016-4329: Kaspersky Anti-Virus

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism.

Affected products

• Kaspersky Anti-Virus: version 16.0.0.614 only
• Kaspersky Internet Security: version 16.0.0.614 only
• Kaspersky Total Security: version 16.0.0.614 only

Published 2017-01-06. Last modified 2026-06-17.