CVE-2016-4306: Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver.

Security readout for executives and security teams

CVE-2016-4306 is a local information disclosure issue in a Kaspersky Total Security driver. A normal user on an affected machine could cause the driver to expose kernel memory, which may reveal sensitive values useful for later attacks. The supplied sources do not show internet-facing exposure or confirmed active exploitation. Exposure appears limited to endpoints running Kaspersky Total Security 16.0.0.614 with the vulnerable KLDISK driver. Risk is higher on shared workstations, servers with untrusted users, or systems where local code execution is already plausible. Treat as a local privilege-chain risk, not an internet emergency based on supplied evidence. Prioritize affected security-software deployments on sensitive endpoints because kernel memory disclosure can help attackers bypass protections after gaining local execution. Mitigation focus: Inventory endpoints for Kaspersky Total Security 16.0.0.614.; Check Kaspersky guidance for fixed versions or supported remediation.; Prioritize upgrade, replacement, or removal on shared and high-value systems..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.