CVE-2021-27223
Medium
Description
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS
SeverityMedium
CVSS5.5
Exploit probability—
ProductKaspersky Anti-virus
PublishedApr 1, 2022
First seenApr 1, 2022
How to fix
Update
- kaspersky anti-virus2021-06 or later
- kaspersky endpoint_security2021-06 or later
- kaspersky internet_security2021-06 or later
- kaspersky security_cloud2021-06 or later
- kaspersky small_office_security2021-06 or later
- kaspersky total_security2021-06 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky anti-virus | v < 2021-06 | 2021-06 |
| kaspersky endpoint_security | v < 2021-06 | 2021-06 |
| kaspersky internet_security | v < 2021-06 | 2021-06 |
| kaspersky security_cloud | v < 2021-06 | 2021-06 |
| kaspersky small_office_security | v < 2021-06 | 2021-06 |
| kaspersky total_security | v < 2021-06 | 2021-06 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.