Multiple Vulnerabilities in Kaspersky Products Identified

CERT-FR Security Advisories

Published March 17th, 2026

Detected March 17th, 2026

Summary

CERT-FR has issued a security advisory regarding multiple vulnerabilities discovered in various Kaspersky product versions. These vulnerabilities could allow an attacker to cause unspecified security issues. Users are advised to consult Kaspersky's security bulletin for patch information.

View original document View source feed page

What changed

CERT-FR has published an advisory (CERTFR-2026-AVI-0301) detailing multiple vulnerabilities found in specific versions of Kaspersky Security for Virtual Environments Light Agent. The vulnerabilities, identified by CVE-2018-20532 and CVE-2021-42260, could potentially lead to unspecified security problems if exploited by an attacker. The advisory does not specify the risk level but directs users to Kaspersky's security bulletin for details and necessary patches.

Organizations utilizing the affected Kaspersky products must immediately consult the provided Kaspersky security bulletin and apply the relevant patches or updates to mitigate these vulnerabilities. Failure to do so could expose their systems to security risks. While no specific compliance deadline is stated, prompt patching is crucial for maintaining system integrity and security posture. The advisory does not mention specific penalties for non-compliance but emphasizes the need for immediate action.

What to do next

Review affected Kaspersky product versions against the advisory details.
Consult Kaspersky's security bulletin for patch information.
Apply necessary patches or updates to mitigate identified vulnerabilities.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 17 mars 2026 N° CERTFR-2026-AVI-0301 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Kaspersky

Gestion du document

Risque

Non spécifié par l'éditeur

Systèmes affectés

Kaspersky Security for Virtual Environments Light Agent versions 5.2.x antérieures à 5.2 pf225 sur Windows (eng)
Kaspersky Security for Virtual Environments Light Agent versions 5.2.x antérieures à 5.2 pf226 sur Windows (fr)
Kaspersky Security for Virtual Environments Light Agent versions 5.2.x antérieures à 5.2 pf227 sur Windows (de)
Kaspersky Security for Virtual Environments Light Agent versions 5.2.x antérieures à 5.2.27-1843 sur Linux

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Kaspersky. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.