Medium severity · published Nov 25, 2019
CVE-2019-15684
Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other…
4.3
CVSS
0.4%
EPSS
No
On KEV
Description
Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 30.112.62.0 · source: NVD
PR
Protection · Kaspersky
20.0.543.1418 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-15684
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-15684
Broken Link
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#251119_1
Third Party Advisory
https://www.symantec.com/security-center/vulnerabilities/writeup/110997
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability