Eset vulnerabilities
45 vulnerabilities
Known vulnerabilities in Eset products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 43 products.
Products
43- Nod32 Antivirus26 vulnerabilities
- Smart Security18 vulnerabilities
- Endpoint Antivirus15 vulnerabilities
- Endpoint Security14 vulnerabilities
- Internet Security13 vulnerabilities
- Mail Security10 vulnerabilities
- Server Security9 vulnerabilities
- Cyber Security8 vulnerabilities
- Security8 vulnerabilities
- File Security6 vulnerabilities
- Mobile Security3 vulnerabilities
- Nod323 vulnerabilities
- Smart Tv Security3 vulnerabilities
- Smart Security Premium2 vulnerabilities
- Antivirus And Antispyware1 vulnerabilities
- Compusec1 vulnerabilities
- Deslock\+ Pro1 vulnerabilities
- Endpoint Encryption1 vulnerabilities
- ESET Endpoint Antivirus For Windows1 vulnerabilities
- ESET Endpoint Security For Windows1 vulnerabilities
- ESET File Security For Microsoft Windows Server1 vulnerabilities
- ESET Internet Security1 vulnerabilities
- ESET Mail Security For IBM Domino1 vulnerabilities
- ESET Mail Security For Microsoft Exchange Server1 vulnerabilities
- ESET Nod32 Antivirus1 vulnerabilities
- ESET Security For Microsoft Sharepoint Server1 vulnerabilities
- ESET Server Security For Microsoft Azure1 vulnerabilities
- ESET Server Security For Microsoft Windows Server1 vulnerabilities
- ESET Smart Security1 vulnerabilities
- Full Disk Encryption1 vulnerabilities
- Management Agent1 vulnerabilities
- Personal Firewall Ndis Filter1 vulnerabilities
- Remote Administrator1 vulnerabilities
- Endpoint Antivirus For Linux0 vulnerabilities
- Endpoint Antivirus For Macos0 vulnerabilities
- ESET Endpoint Antivirus0 vulnerabilities
- ESET File Security For Microsoft Azure0 vulnerabilities
- ESET Safe Server0 vulnerabilities
- ESET Security Ultimate0 vulnerabilities
- ESET Server Security For Windows Server0 vulnerabilities
- ESET Small Business Security0 vulnerabilities
- ESET Smart Security Premium0 vulnerabilities
- Server Security For Linux0 vulnerabilities
CVE-2018-0649canon it solutions inc.the installers of multiple canon it solutions inc. software programs+6
EPSS score1.13%
Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2021-37850eset, spol. s r.o.eset cyber security+6EPSS score0.23%
ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot.CVE-2021-37851eset, spol. s r.o.eset endpoint antivirus+18EPSS score0.21%
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.CVE-2021-37852esetendpoint_antivirus+19EPSS score0.60%
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.CVE-2015-8841esetnod32EPSS score8.88%
Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SIS_FILE_MULTILANG.CVE-2007-3970esetnod32_antivirusEPSS score5.58%
Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.CVE-2016-9892esetendpoint_antivirus+1EPSS score1.66%
The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.CVE-2025-13818eset spol s.r.o.eset management agent+1EPSS score0.13%
Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management AgentCVE-2020-11446esetantivirus_and_antispyware+7EPSS score0.38%
ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.CVE-2020-26941esetendpoint_antivirus+7EPSS score0.34%
A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of any file via a symlink, due to insecure permissions. The possibility of exploiting this vulnerability is limited and can only take place during the installation phase of ESET products. Furthermore, exploitation can only succeed when Self-Defense is disabled. Affected products are: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security, ESET Smart Security Premium versions 13.2 and lower; ESET Endpoint Antivirus, ESET Endpoint Security, ESET NOD32 Antivirus Business Edition, ESET Smart Security Business Edition versions 7.3 and lower; ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Kerio, ESET Security for Microsoft SharePoint Server versions 7.2 and lower.CVE-2020-9264esetcyber_security+5EPSS score1.21%
ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.CVE-2020-10193esetcyber_security+5EPSS score1.39%
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.CVE-2020-10180esetcyber_security+4EPSS score1.69%
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.CVE-2014-4973esetendpoint_security+1EPSS score1.31%
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.CVE-2014-4974esetpersonal_firewall_ndis_filterEPSS score0.54%
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls.CVE-2008-7107esetsmart_securityEPSS score0.83%
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL 0x222003 request to the \\.\easdrv device interface.CVE-2008-5724esetsmart_securityEPSS score0.80%
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.CVE-2008-5425esetnod32_antivirusEPSS score2.28%
ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.CVE-2008-5534esetnod32_antivirusEPSS score3.47%
ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.CVE-2008-5527esetsmart_securityEPSS score2.24%
ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.