We recommend our customers to use the latest versions of the installers from our website. We access the severity of this issue as Low. To exploit this issue, the attacker needed administrator rights and had to create registry keys pointing to the file they wanted to execute. The third issue allowed an attacker to unnoticeably run an adversarial executable instead of running the uninstaller intended to remove the third-party security products when installing Kaspersky solutions.We access the severity of these issues as Low.

This security issue allowed an attacker to legitimately run a third-party executable in the context of the installation process.

Two reported issues relate to two executables from the products’ installers that could be utilized separately from the product.Kaspersky team has fixed three security issues in the installers of Kaspersky products for home, the Kavremover tool, and Kaspersky Endpoint Security.