Kaspersky Password Manager vulnerabilities

3 CVEs affecting Kaspersky Password Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-35052, published 2021-11-23.

More from Kaspersky.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-6306, published 2018-04-19. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.
• CVE-2020-27020, published 2021-05-14. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker…
• CVE-2021-35052, published 2021-11-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High.