CVSS 3.0
7.1 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HCVE-2017-18019
High (7.1) in k7computing total security. EPSS 1.2% chance of exploitation in the next 30 days.
In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory. Similarly, the product crashes upon a \\.\K7Sentry DeviceIoControl call with an invalid kernel pointer.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- k7computing:total_security