Vulnerability Spotlight: Kernel Information Leak & Multiple DOS Issues Within Kaspersky Internet Security Suite
Summary: Cisco Talos reported vulnerabilities in Kaspersky Internet Security 16.0.0, specifically in the KLIF driver version 10.0.0.1532, where a crafted IOCTL call to the KL1 driver can read memory outside an allocated buffer and crash the system, and a weak KlDiskCtl implementation in kldisk.sys can leak kernel memory to userland. Talos notes the flaws may affect other versions and that the leaked kernel information could be combined with other vulnerabilities to subvert protections such as address space layout randomization.
Why it matters: Anti-virus software runs with low-level privileges on every protected system, so a kernel memory leak in a security product gives an attacker a foothold that other defenses assume is trustworthy.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026