CVE-2022-27535: Kaspersky VPN Secure Connection

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker.

Affected products

• Kaspersky VPN Secure Connection: before 21.6 (fixed in 21.6)

Published 2022-08-05. Last modified 2026-06-17.