CVE-2020-28950

HIGH

Kaspersky Anti-ransomware Tool < 4.0 - Uncontrolled Search Path

Title source: rule

Description

The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process.

References (2)

Scores

CVSS v3 7.8
EPSS 0.0005
EPSS Percentile 14.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status published

Affected Products (2)

kaspersky/anti-ransomware_tool < 4.0
kaspersky/anti-ransomware_tool

Timeline

Published Dec 04, 2020
Tracked Since Feb 18, 2026