Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | 0 |
| ESET, spol. s r.o. | ESET Internet Security | 0 |
| ESET, spol. s r.o. | ESET Smart Security Premium | 0 |
| ESET, spol. s r.o. | ESET Security Ultimate | 0 |
| ESET, spol. s r.o. | ESET Endpoint Antivirus for Windows | 0, 0, 0, 0 |
| ESET, spol. s r.o. | ESET Endpoint Security for Windows | 0, 0, 0, 0 |
| ESET, spol. s r.o. | ESET Server Security for Windows Server | 0, 0, 0, 0 |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | 0, 0, 0, 0, 0 |
| ESET, spol. s r.o. | ESET Mail Security for IBM Domino | 0, 0, 0, 0 |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | 0, 0, 0, 0 |
| ESET, spol. s r.o. | ESET File Security for Microsoft Azure | 0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.