CVE-2019-15689: Medium severity kaspersky internet security vulnerability
Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code via execution compromised file placed by an attacker with administrator rights. No privilege escalation. Possible whitelisting bypass some of the security products
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15689?
CVE-2019-15689 has a medium severity rating due to the potential for local users to execute arbitrary code.
How do I fix CVE-2019-15689?
To fix CVE-2019-15689, update your Kaspersky software to the latest version or patch provided by Kaspersky.
What versions of Kaspersky are affected by CVE-2019-15689?
CVE-2019-15689 affects Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, and Kaspersky Security Cloud prior to version 2020 patch E.
What kind of attack does CVE-2019-15689 enable?
CVE-2019-15689 enables local users with administrator rights to execute arbitrary code through compromised files.
Is there a workaround for CVE-2019-15689 while waiting for a fix?
There is no official workaround for CVE-2019-15689; the best solution is to apply the available software updates.