K7 Computing 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
一般的な弱点パターンには vendor risk input validation、vendor risk memory corruption、バッファオーバーフロー, and パス処理の欠陥 があり、vendor surface production workloads and vendor surface software deployment の利用場面で アプリケーションクラッシュ、vendor impact unexpected behavior, and ファイル上書き などのリスクが生じる可能性があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2025-67826 | An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation (LPE) vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit any registry key, leading to a full compromise as SYSTEM. | [email protected] | 7.7 | 0.01% | 2025-12-22 | 2026-01-02 |
| CVE-2024-36424 | K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of a NULL pointer dereference. | [email protected] | 5.5 | 0.58% | 2024-08-06 | 2025-03-13 |
| CVE-2018-9333 | K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe. | [email protected] | 7.8 | 0.08% | 2021-01-11 | 2024-11-21 |
| CVE-2018-9332 | K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). | [email protected] | 7.8 | 0.06% | 2021-01-11 | 2024-11-21 |
| CVE-2018-8726 | K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe. | [email protected] | 7.8 | 0.10% | 2021-01-11 | 2024-11-21 |
| CVE-2018-8725 | K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe. | [email protected] | 7.8 | 0.10% | 2021-01-11 | 2024-11-21 |
| CVE-2018-8724 | K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). The component is: K7TSMngr.exe. | [email protected] | 7.8 | 0.06% | 2021-01-11 | 2024-11-21 |
| CVE-2018-8044 | K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process Execution (local). The component is: K7Sentry.sys. | [email protected] | 7.8 | 0.06% | 2021-01-11 | 2024-11-21 |
| CVE-2018-11246 | K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak. | [email protected] | 7.5 | 0.47% | 2021-01-11 | 2024-11-21 |
| CVE-2018-11010 | A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. | [email protected] | 7.8 | 0.24% | 2021-01-11 | 2024-11-21 |
| CVE-2018-11009 | A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. | [email protected] | 7.8 | 0.24% | 2021-01-11 | 2024-11-21 |
| CVE-2018-11008 | An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. | [email protected] | 5.5 | 0.06% | 2021-01-11 | 2024-11-21 |
| CVE-2018-11007 | A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. | [email protected] | 5.5 | 0.14% | 2021-01-11 | 2024-11-21 |
| CVE-2018-11006 | An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. | [email protected] | 5.5 | 0.06% | 2021-01-11 | 2024-11-21 |
| CVE-2018-11005 | A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. | [email protected] | 5.5 | 0.14% | 2021-01-11 | 2024-11-21 |
| CVE-2019-16896 | In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality. | [email protected] | 7.8 | 0.22% | 2019-12-27 | 2024-11-21 |
| CVE-2019-16897 | In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll module to facilitate escalation of privileges via inter-process communication with a service process. | [email protected] | 9.8 | 0.36% | 2019-10-28 | 2024-11-21 |
| CVE-2017-17429 | In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL. | [email protected] | 5.5 | 0.05% | 2018-01-16 | 2024-11-21 |
| CVE-2017-16557 | K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. | [email protected] | 7.0 | 0.05% | 2018-01-16 | 2024-11-21 |
| CVE-2017-16556 | In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations. | [email protected] | 5.5 | 0.05% | 2018-01-16 | 2024-11-21 |