CVE-2019-8286: Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versi...

Security readout for executives and security teams

This issue could let a malicious webpage learn a unique Kaspersky product ID from older consumer Kaspersky products. It is not described as code execution or data theft from files, but it may enable device fingerprinting or targeting after a phishing click. Exposure is most relevant where endpoints still run Kaspersky Anti-Virus, Internet Security, or Total Security versions up to 2019 and users browse untrusted links. Modern, retired, or centrally updated installations may not be affected, but the provided sources do not name exact fixed builds. Treat this as low business urgency unless legacy Kaspersky consumer products remain deployed. The main concern is tracking or targeting users after phishing, not immediate system takeover. Resolve through normal endpoint hygiene and legacy software cleanup. Mitigation focus: Inventory Kaspersky consumer endpoint products and identify versions up to 2019.; Check Kaspersky advisory guidance for fixed versions or vendor-recommended remediation.; Upgrade or replace affected installations according to vendor guidance..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.