VYPR
Vendor

K7 Computing

Products
3
CVEs
2
Across products
3
Status
Private

Products

3

Recent CVEs

2
  • CVE-2025-52915HigSep 9, 2025
    risk 0.47cvss 7.2epss 0.00

    K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabling unauthorized processes to perform those actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical third-party services or applications.

  • CVE-2025-67826Dec 22, 2025
    risk 0.00cvss epss 0.00

    An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation (LPE) vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit any registry key, leading to a full compromise as SYSTEM.