The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25043
Reference (s):
- https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
- URL: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720