Eset vulnerabilities
We track 7 vulnerabilities in Eset products across 16 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 27, 2024.
Latest Eset vulnerabilities
- 8.5 High severity
ESET NOD32 Antivirus: Insecure Operation on Windows Junction / Mount Point
The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.
- 7.8 High severity
ESET NOD32 Antivirus: Improper Privilege Management
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
- 8.6 High severity
ESET NOD32 Antivirus: Improper Certificate Validation
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
- 7.8 High severity
ESET NOD32 Antivirus: Improper Privilege Management
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.
- 7.8 High severity
Server Security for Linux: Improper Privilege Management
During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions w
- 7.1 High severity
ESET NOD32 Antivirus: Improper Handling of Exceptional Conditions
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior
- 7.5 High severity
Endpoint Antivirus for Linux: Use After Free
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.