CVE-2010-2031: KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local user...

Security readout for executives and security teams

CVE-2010-2031 is a local vulnerability in Kingsoft Webshield's KAVSafe.sys driver. A user who can already run code on the affected Windows host may overwrite kernel memory, potentially escalating privileges or crashing the system. Exposure is mainly legacy systems still running this old product or driver. Most exposure is likely limited to older Windows endpoints or images where Kingsoft Webshield 3.5.1.2 or earlier remains installed. Modern environments are exposed only if this legacy driver persists. Treat as high priority only where the legacy product is present. The business risk is privilege escalation after initial local access, which can turn a limited compromise into full system control. Mitigation focus: Inventory endpoints for Kingsoft Webshield and KAVSafe.sys versions.; Remove unsupported Kingsoft Webshield installations where no business need exists.; Check vendor or maintainer guidance for any fixed KAVSafe.sys release..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.