Kaspersky Rescue Disk 18.0.11.3c (2023.09.13) instal the new for windows

We would like to thank Nasreddine Bencherchali who discovered the issues and responsibly reported them to Kaspersky. Also, we recommend the users who can’t use the latest versions of the installers to follow these instructions.

The users of already installed products are not affected by these issues. We recommend our customers to use the latest versions of the installers from our website.

We access the severity of this issue as Low. To exploit this issue, the attacker needed administrator rights and had to create registry keys pointing to the file they wanted to execute.

The third issue allowed an attacker to unnoticeably run an adversarial executable instead of running the uninstaller intended to remove the third-party security products when installing Kaspersky solutions.

We access the severity of these issues as Low. This security issue allowed an attacker to legitimately run a third-party executable in the context of the installation process.

Two reported issues relate to two executables from the products’ installers that could be utilized separately from the product.

Kaspersky team has fixed three security issues in the installers of Kaspersky products for home, the Kavremover tool, and Kaspersky Endpoint Security.

Kaspersky Rescue Disk 18.0.11.3c (2023.09.13) instal the new for windows