CVE-2014-9643: K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allow...

Security readout for executives and security teams

CVE-2014-9643 is a local privilege escalation flaw in K7 security products. A user already on a Windows system could abuse the K7Sentry.sys driver to gain higher privileges. It is not described as remotely exploitable, but public exploit references exist, raising concern for legacy endpoints. Exposure is likely limited to Windows endpoints running K7 Computing Ultimate Security, Anti-Virus Plus, or Total Security versions earlier than 14.2.0.253. Organizations with unmanaged legacy antivirus deployments are the most plausible risk group. Prioritize remediation if K7 security software remains in use. The business risk is mainly attacker escalation after local access, but security software runs with high privilege, so legacy vulnerable installs deserve prompt removal or upgrade. Mitigation focus: Inventory endpoints for affected K7 Computing products and versions.; Upgrade affected products to 14.2.0.253 or later where supported.; Remove unsupported or unmanaged legacy K7 installations..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.