CVE-2022-27534: Kaspersky Anti-Virus

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies).

Affected products

• Kaspersky Anti-Virus: before 12.03.2022 (fixed in 12.03.2022)
• Kaspersky Endpoint Security: before 12.03.2022 (fixed in 12.03.2022)
• Kaspersky Internet Security: before 12.03.2022 (fixed in 12.03.2022)
• Kaspersky Security Cloud: before 12.03.2022 (fixed in 12.03.2022)
• Kaspersky Small Office Security: before 12.03.2022 (fixed in 12.03.2022)
• Kaspersky Total Security: before 12.03.2022 (fixed in 12.03.2022)

Published 2022-04-01. Last modified 2026-06-17.