CVE-2017-16552: k7computing Antivirus

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.

Affected products

• k7computing Antivirus: before 15.1.0.53 (fixed in 15.1.0.53); before 15.1.0308 (fixed in 15.1.0308)
• k7computing Endpoint: before 14.2.0137 (fixed in 14.2.0137)
• k7computing Internet Security: before 15.1.0297 (fixed in 15.1.0297)
• k7computing Total Security: before 15.1.0324 (fixed in 15.1.0324); before 16.0.0131 (fixed in 16.0.0131)
• k7computing Ultimate Security: before 15.1.0324 (fixed in 15.1.0324)

Published 2018-01-16. Last modified 2026-06-17.