Kaspersky VPN Secure Connection vulnerabilities

2 CVEs affecting Kaspersky VPN Secure Connection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27535, published 2022-08-05.

More from Kaspersky.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-27535, published 2022-08-05. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated…
• CVE-2020-25043, published 2020-09-02. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system.