CVE-2021-27223: Kaspersky Anti-Virus

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS

Affected products

• Kaspersky Anti-Virus: before 2021-06 (fixed in 2021-06)
• Kaspersky Endpoint Security: before 2021-06 (fixed in 2021-06)
• Kaspersky Internet Security: before 2021-06 (fixed in 2021-06)
• Kaspersky Security Cloud: before 2021-06 (fixed in 2021-06)
• Kaspersky Small Office Security: before 2021-06 (fixed in 2021-06)
• Kaspersky Total Security: before 2021-06 (fixed in 2021-06)

Published 2022-04-01. Last modified 2026-06-17.