What is the Kaspersky CNA?

Kaspersky is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 154 CVE records since 2017.

How many CVEs has Kaspersky published?

Kaspersky has published 154 CVE records, including 18 in the last two years.

What is Kaspersky's CVE data quality grade?

RadicalNotion.AI grades Kaspersky's CVE data quality as F, with an overall completeness score of 59.9%. This reflects how consistently its CVE records include vendor (79.9%), product (100%), CVSS (18.2%), and CWE (41.6%) information.

What products does Kaspersky publish CVEs for?

Kaspersky most frequently publishes CVEs for UltraVNC, sinumerik pcu base win7 software/ipc, sinumerik pcu base win10 software/ipc, sinumerik access mymachine/p2p, LibVNCServer.

Which vendors does Kaspersky cover?

Kaspersky publishes CVEs across 18 distinct vendors, most often Kaspersky, uvnc, siemens, Moxa, LibVNC.

Is Kaspersky actively publishing CVEs?

Kaspersky is currently active, based on 18 CVEs in the last two years.

What is the average severity of Kaspersky's CVEs?

The average CVSS base score across Kaspersky's scored CVEs is 6.7.

How many critical CVEs has Kaspersky published?

Kaspersky has published 54 critical-severity CVEs and 65 high-severity CVEs.

Are any of Kaspersky's CVEs in CISA's Known Exploited Vulnerabilities catalog?

Yes. 1 of Kaspersky's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.

What are the most common weakness types in Kaspersky's CVEs?

Kaspersky's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-121 (Stack-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-788 (Access of Memory Location After End of Buffer).

How does Kaspersky rank among CNAs?

By total CVE volume, Kaspersky ranks #101 of 370 CNAs, and it reports more complete CVE records than 14% of all CNAs.

Grade F

Active

Kaspersky

Name: Kaspersky CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published November 20, 2025

154

CVEs published

Total assigned

8.2

Years active

2017–2025

6.7

Avg CVSS

Across scored CVEs

Recent CVEs

Last 2 years

Overview

Kaspersky is a CVE Numbering Authority that has published 154 CVE records since 2017. It is currently classified as active, with 18 CVEs published in the last two years. Its CVE data quality is graded F (59.9% overall completeness).

Among the 370 CNAs tracked here, Kaspersky ranks #101 by CVE volume and reports more complete records than 14% of all CNAs.

Data quality report card

How complete and consistent Kaspersky's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often Kaspersky also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

59.9%

Overall score

Overall completeness59.9%

Vendor completeness79.9%

Product completeness100%

CVSS completeness18.2%

CWE completeness41.6%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

232 chars

Avg description length

Per CVE record

2017-08-25

First CVE date

Earliest assignment

2025-11-20

Latest CVE date

Most recent assignment

6.7

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of Kaspersky's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical54

High65

Medium34

Low2

In CISA’s Known Exploited Vulnerabilities catalog

One of Kaspersky's CVEs is confirmed exploited in the wild and carries a CISA remediation deadline.

Common weakness types

The CWE weakness categories Kaspersky most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs Kaspersky has published each year.

2019

2020

2021

2022

2023

2024

2025

2026

Top vendors

The vendors Kaspersky publishes the most CVEs for.

Kaspersky80 CVEs
uvnc22 CVEs
siemens15 CVEs
Moxa11 CVEs
LibVNC11 CVEs
debian10 CVEs
Hanwha Techwin10 CVEs
canonical10 CVEs

Latest CVEs

The most recent CVEs assigned by Kaspersky.

CVE-2026-8398
CISA KEV
CWE-506
Critical · CVSS 9.3
EPSS 1.5%2026-05-15
CVE-2025-64984CWE-79
Medium · CVSS 5.1
EPSS 0.2%2025-11-20
CVE-2025-9060CWE-20
MFlash Remote Code Execution (RCE) after authentication of a user with the "administrator" role
Critical · CVSS 9.1
EPSS 0.5%2025-08-15
CVE-2025-7771CWE-782
Code Execution / Escalation of Privileges in ThrottleStop
High · CVSS 8.7
EPSS 6.8%2025-08-06
CVE-2024-13614CWE-190
Medium · CVSS 5.3
EPSS 0.1%2025-02-06
CVE-2019-15690CWE-122
High · CVSS 8.8
EPSS 0.7%2025-01-24
CVE-2024-8653CWE-79
Medium · CVSS 5.9
EPSS 0.3%2024-09-19
CVE-2024-8652CWE-79
Netcat CMS: reflected cross-site scripting in openstat module
Medium · CVSS 5.9
EPSS 0.3%2024-09-19
CVE-2024-8651CWE-204
Medium · CVSS 6.9
EPSS 0.4%2024-09-19
CVE-2024-5866CWE-26
Medium · CVSS 5.0
EPSS 0.4%2024-07-02
CVE-2024-5865CWE-26
High · CVSS 7.7
EPSS 0.5%2024-07-02
CVE-2023-3943CWE-121
Critical · CVSS 10.0
EPSS 0.9%2024-05-21

Track new Kaspersky CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor Kaspersky CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the Kaspersky CNA.

What is the Kaspersky CNA?: Kaspersky is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 154 CVE records since 2017.
How many CVEs has Kaspersky published?: Kaspersky has published 154 CVE records, including 18 in the last two years.
What is Kaspersky's CVE data quality grade?: RadicalNotion.AI grades Kaspersky's CVE data quality as F, with an overall completeness score of 59.9%. This reflects how consistently its CVE records include vendor (79.9%), product (100%), CVSS (18.2%), and CWE (41.6%) information.
What products does Kaspersky publish CVEs for?: Kaspersky most frequently publishes CVEs for UltraVNC, sinumerik pcu base win7 software/ipc, sinumerik pcu base win10 software/ipc, sinumerik access mymachine/p2p, LibVNCServer.
Which vendors does Kaspersky cover?: Kaspersky publishes CVEs across 18 distinct vendors, most often Kaspersky, uvnc, siemens, Moxa, LibVNC.
Is Kaspersky actively publishing CVEs?: Kaspersky is currently active, based on 18 CVEs in the last two years.
What is the average severity of Kaspersky's CVEs?: The average CVSS base score across Kaspersky's scored CVEs is 6.7.
How many critical CVEs has Kaspersky published?: Kaspersky has published 54 critical-severity CVEs and 65 high-severity CVEs.
Are any of Kaspersky's CVEs in CISA's Known Exploited Vulnerabilities catalog?: Yes. 1 of Kaspersky's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.
What are the most common weakness types in Kaspersky's CVEs?: Kaspersky's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-121 (Stack-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-788 (Access of Memory Location After End of Buffer).
How does Kaspersky rank among CNAs?: By total CVE volume, Kaspersky ranks #101 of 370 CNAs, and it reports more complete CVE records than 14% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track Kaspersky CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing