CVEvulnerability
CVE-2022-27535
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker.
Affected configurations
• kaspersky vpn secure connection (< 21.6)
References
- https://forum.kaspersky.com/topic/kaspersky-statement-on-cve-2022-27535-26742/ Vendor Advisory
- https://support.kaspersky.com/general/vulnerability.aspx?el=12430#050822 Vendor Advisory
- https://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/ Third Party Advisory
- https://forum.kaspersky.com/topic/kaspersky-statement-on-cve-2022-27535-26742/ Vendor Advisory
- https://support.kaspersky.com/general/vulnerability.aspx?el=12430#050822 Vendor Advisory
- https://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/ Third Party Advisory