CVE-2019-8286

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-18 · updated 2026-06-17
Weakness: CWE-200

Description

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6

Affected products

Kaspersky Anti-Virus: through 2019
Kaspersky Free Anti-Virus: through 2019
Kaspersky Internet Security: through 2019
Kaspersky Small Office Security: through 6.0
Kaspersky Total Security: through 2019

References

http://www.securityfocus.com/bid/109300
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#110719
http://www.securityfocus.com/bid/109300
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#110719

Get alerted when CVE-2019-8286 or the next vulnerability affects your stack