VulnerabilityModified

CVE-2019-15684

Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions.

MEDIUM 4.3EPSS 0.39%

Does this matter?

Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS: 0.39% probability · 32th percentile
CISA KEV: Not listed
Affected: google/chrome · kaspersky/protection
Source: vulnerability@kaspersky.com

References

https://support.kaspersky.com/general/vulnerability.aspx?el=12430#251119_1Broken Link
https://www.symantec.com/security-center/vulnerabilities/writeup/110997Third Party Advisory
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#251119_1Broken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.