CVE-2019-8286

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6

Score

CVSS 3.0 4.3 Medium

Status

Modified - vulnerability@kaspersky.com

Published

2019-07-18

Last modified

2024-08-04

Weaknesses

CWE-200

Affected products

• Anti-virus (Kaspersky)
• Free Anti-virus (Kaspersky)
• Internet Security (Kaspersky)
• Kaspersky Anti-virus (Kaspersky)
• Kaspersky Internet Security (Kaspersky)
• Kaspersky Total Security (Kaspersky)
• Small Office Security (Kaspersky)
• Total Security (Kaspersky)

References

• http://www.securityfocus.com/bid/109300
• https://support.kaspersky.com/general/vulnerability.aspx?el=12430#110719