VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Dec 2, 2019· Updated Jun 17, 2026

CVE-2019-15689

CVE-2019-15689

Description

Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code via execution compromised file placed by an attacker with administrator rights. No privilege escalation. Possible whitelisting bypass some of the security products

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Kaspersky Lab/Internet Security4 versions
    cpe:2.3:a:kaspersky:kaspersky_internet_security:2019:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:kaspersky:kaspersky_internet_security:2019:-:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:kaspersky_internet_security:2019:patch_f:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:kaspersky_internet_security:2019:patch_i:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:kaspersky_internet_security:2019:patch_j:*:*:*:*:*:*
  • Kaspersky Lab/Secure Connection3 versions
    cpe:2.3:a:kaspersky:secure_connection:3.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:kaspersky:secure_connection:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:secure_connection:4.0:*:*:*:*:*:*:*
    • (no CPE)range: <2020 patch E
  • Kaspersky Lab/Security Cloud4 versions
    cpe:2.3:a:kaspersky:security_cloud:2019:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:kaspersky:security_cloud:2019:-:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:security_cloud:2019:patch_i:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:security_cloud:2019:patch_j:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:security_cloud:2020:-:*:*:*:*:*:*
  • Kaspersky Lab/Total Security6 versions
    cpe:2.3:a:kaspersky:total_security:2019:-:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:kaspersky:total_security:2019:-:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:total_security:2019:patch_f:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:total_security:2019:patch_i:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:total_security:2019:patch_j:*:*:*:*:*:*
    • cpe:2.3:a:kaspersky:total_security:2020:*:*:*:*:*:*:*
    • (no CPE)range: <2020 patch E
  • Kaspersky Lab/Kaspersky Internet Security 2009llm-fuzzy
    Range: <2020 patch E
  • Kaspersky/Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloudv5
    Range: prior to version 2020 patch E

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.