Fixing vulnerabilities and installing critical updates

Kaspersky may release application updates aimed at eliminating vulnerabilities and security flaws (critical updates). Urgent update packages are supplied and installed in accordance with the current Technical Support Agreement. Notifications regarding the release of critical updates are sent to the email addresses specified in the current Technical Support Agreement.

It is recommended that the personnel responsible for application operation also periodically (at least once every three months) verify the absence of detected vulnerabilities in the application by referring to the Kaspersky website.

You can report security flaws or program vulnerabilities with a PGP-encrypted message to vulnerability@kaspersky.com. Please provide the following information in your email:

• Your contact details.
• The product name, version, and type of operating system installed on the asset where the vulnerability was found.
• A detailed description of the vulnerability.
• Any plans to share information about the vulnerability with a third party.

  Do not publish any information about the vulnerability until fixed by Kaspersky.