Kaspersky Password Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Kaspersky Password Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-6306 — CVSS 7.8 (high): Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.
• CVE-2021-35052 — CVSS 7.8 (high): A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High.
• CVE-2020-27020 — CVSS 7.5 (high): Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to…