ESET, spol. s r.o. vulnerabilities
We track 8 vulnerabilities in ESET, spol. s r.o. products across 24 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest ESET, spol. s r.o. vulnerabilities
- 8.5 High severity
ESET Endpoint Encryption: Improper Access Control
An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests.
- 8.4 High severity
ESET NOD32 Antivirus: Uncontrolled Search Path Element
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
- 8.5 High severity
ESET NOD32 Antivirus: Insecure Operation on Windows Junction / Mount Point
The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.
- 7.8 High severity
ESET NOD32 Antivirus: Improper Privilege Management
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
- 8.6 High severity
ESET NOD32 Antivirus: Improper Certificate Validation
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
- 7.8 High severity
ESET NOD32 Antivirus: Improper Privilege Management
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.
- 7.1 High severity
ESET NOD32 Antivirus: Improper Handling of Exceptional Conditions
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior
- 7.5 High severity
Endpoint Antivirus for Linux: Use After Free
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.