CVE-2017-16554

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-16 · updated 2026-06-17
Weakness: CWE-787

Description

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.

Affected products

K7Computing Antivirus: before 15.1.0.53; before 15.1.0308 — fixed in 15.1.0.53, 15.1.0308
K7Computing Endpoint: before 14.2.0137 — fixed in 14.2.0137
K7Computing Internet Security: before 15.1.0297 — fixed in 15.1.0297
K7Computing Total Security: before 15.1.0324; before 16.0.0131 — fixed in 15.1.0324, 16.0.0131
K7Computing Ultimate Security: before 15.1.0324 — fixed in 15.1.0324

How to fix

Upgrade to a fixed version: K7Computing Antivirus 15.1.0.53, 15.1.0308; K7Computing Endpoint 14.2.0137; K7Computing Internet Security 15.1.0297; K7Computing Total Security 15.1.0324, 16.0.0131; K7Computing Ultimate Security 15.1.0324. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-16554 or the next vulnerability affects your stack