CVE-2024-13614

mediumpriority · track · 0EPSS 0.001 · 2 %ileDEEURU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.13% (2nd) EPSS

CVSS 5.3 · medium

Is it mine?

20 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.

cvss

Technical severity, 0–10. One row per scoring source.

5.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.3mediumAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:Hsecondary · FSTEC (BDU) RU

v3.15.3mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:Hsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:Hsecondary · vulnerability@kaspersky.comexploitability 1 · impact 4.2

v3.14.9mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-190USCWE-190US

affected products (20)

Products and version ranges known to be affected.

Kaspersky Anti-Virusall versionscert_bundDEcpe:/a:kaspersky:anti_virus:-
Kaspersky Anti-Virus <SDK8 v. 8.10.2.2098.all versionscert_bundDE
Kaspersky Internet Securityall versionscert_bundDEcpe:/a:kaspersky:internet_security:-
Kaspersky Anti-Virus< SDK8 v. 8.10.2.2098.cert_bundDE
Kaspersky Kaspersky Anti-Virus SDK for Windows≤ 8.10.1.1943 CF ≤8.10.1.1943 CFenisa_euvdEU
Kaspersky Kaspersky Anti-Virus SDK for Windows≤ 8.10.1.1943 ≤8.10.1.1943enisa_euvdEU
Kaspersky Kaspersky Security for Virtualization Light Agent5.2 → 5.2.27.319enisa_euvdEU
АО «Лаборатория Касперского» Kaspersky Anti-Ransomware Tool≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Anti-Virus≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Anti-Virus SDK≤ 8 Level 3 v. 8.10.2.2098fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Endpoint Security≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Endpoint Security for Virtualization Light Agent Course5.2 → 5.2.27.319fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Free≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Internet Security≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Plus≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Premium≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Safe Kids≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Security Cloud≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Small Office Security≥ 06.11.2024fstec_bduRU
АО «Лаборатория Касперского» Kaspersky Standard≥ 06.11.2024fstec_bduRU

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-0293Kaspersky Anti-Virus: Schwachstelle ermöglicht Denial of ServiceDeutsch2025-02-06csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in Kaspersky Anti-Virus ausnutzen, um einen Denial of Service auszulösen

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2025-02-06modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan