CVE-2024-13614

Medium

Description

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.

SeverityMedium
CVSS5.3
Exploit probability—
ProductKaspersky Anti-Virus SDK for Windows
PublishedFeb 6, 2025
First seenFeb 6, 2025

How to fix

Update
  • Kaspersky Kaspersky Security for Virtualization Light Agent5.2.27.319 or later

Affected products

ProductAffected versionsFixed in
Kaspersky Kaspersky Anti-Virus SDK for Windows8.10.1.1943, 8.10.1.1943 CF—
Kaspersky Kaspersky Security for Virtualization Light Agent5.2 ≤ v < 5.2.27.3195.2.27.319

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.