CVE-2022-27535 | BDVDB-2026-181663 Detail

Kaspersky VPN Secure Connection for Windows

Description#

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.kaspersky.com/general/vulnerability.aspx?el=12430#050822
https://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/
https://forum.kaspersky.com/topic/kaspersky-statement-on-cve-2022-27535-26742/

Exploit#

No public exploit known

History#

Version 12022-08-05Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.