{"id":"CVE-2024-13614","aliases":["EUVD-2024-51693","GHSA-pr8f-278h-qxq5"],"status":"published","title":"Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security...","description":"Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0013,"percentile":0.02685,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2025-02-06T16:13:08Z","modified":"2026-06-17T07:02:22Z","products":[{"vendor":"kaspersky","product":"kaspersky anti-ransomware tool"},{"vendor":"kaspersky","product":"kaspersky anti-virus"},{"vendor":"kaspersky","product":"kaspersky anti-virus sdk for windows"},{"vendor":"kaspersky","product":"kaspersky endpoint security for windows"},{"vendor":"kaspersky","product":"kaspersky for windows (standard, plus, premium)"},{"vendor":"kaspersky","product":"kaspersky free"},{"vendor":"kaspersky","product":"kaspersky internet security"},{"vendor":"kaspersky","product":"kaspersky safe kids"},{"vendor":"kaspersky","product":"kaspersky security cloud"},{"vendor":"kaspersky","product":"kaspersky security for virtualization light agent"},{"vendor":"kaspersky","product":"kaspersky small office security"}],"references":[{"url":"https://support.kaspersky.com/vulnerability/list-of-advisories/12430#060225","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-13614"},{"url":"https://github.com/advisories/GHSA-pr8f-278h-qxq5"}],"sources":{"cve":[{"id":"CVE-2024-13614","description":"Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.","status":"published","published":"2025-02-06T16:13:08.173Z","modified":"2025-02-12T19:51:09.532Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:13.64024Z"}],"euvd":[{"id":"EUVD-2024-51693","description":"Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.","status":"published","published":"2025-02-06T16:13:08Z","modified":"2025-02-12T19:51:09Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T00:03:56.967798Z"}],"ghsa":[{"id":"GHSA-pr8f-278h-qxq5","title":"Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security...","description":"Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.","status":"published","published":"2025-02-06T18:31:05Z","modified":"2025-02-06T18:31:11Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:59:48.779987Z"}],"nvd":[{"id":"CVE-2024-13614","description":"Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.","status":"published","published":"2025-02-06T17:15:18.08Z","modified":"2026-06-17T07:02:22.48Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:10:44.033107Z"}]}}