CVE-2024-0353: eset, spol. s r.o. eset endpoint antivirus for windows Improper Privilege Management
CVSS: 7.8v3.1HighModified
Published 15-02-2024Last modified 10-12-2025
Vulnerability summary
CVE-2024-0353 is a high (CVSS 7.8) Improper Privilege Management vulnerability in eset, spol. s r.o. eset endpoint antivirus for windows. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 44.9% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.55%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 15-02-2024PublishedVulnerability first disclosed.
- 10-12-2025Last modifiedVulnerability information updated.
Description
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
CVSS metrics
2 scores · 2 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 2 agree
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.55%
Chance of exploitation in the next 30 days
Percentile
45%
Versus all other CVEs
30-day change
0.00 pp
From 0.55% on 19-09-2026
19-09-202619-10-2026
EPSS score0.55%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Eset, spol. s r.o.11 products
- eset endpoint antivirus for windows≤ 10.1.2058.0 | ≤ 10.0.2049.0 | ≤ 9.1.2066.0 | ≤ 8.1.2052.0
- eset endpoint security for windows≤ 10.1.2058.0 | ≤ 10.0.2049.0 | ≤ 9.1.2066.0 | ≤ 8.1.2052.0
- eset file security for microsoft azure≤ all versions
- eset internet security≤ 16.2.15.0
- eset mail security for ibm domino≤ 10.0.14006.0 | ≤ 9.0.14007.0 | ≤ 8.0.14010.0 | ≤ 7.3.14004.0
Eset8 products
- endpoint_antivirus< 8.1.2062.0 | ≥ 9.0, < 9.1.2071.0 | ≥ 10.0, < 10.0.2052.0 | ≥ 10.1, < 10.1.2063.0 | ≥ 11.0, < 11.0.2032.0
- endpoint_security< 8.1.2062.0 | ≥ 9.0, < 9.1.2071.0 | ≥ 10.0, < 10.0.2052.0 | ≥ 10.1, < 10.1.2063.0 | ≥ 11.0, < 11.0.2032.0
- internet_security< 17.0.10.0
- mail_security< 7.3.10018.0 | < 7.3.14006.0 | ≥ 8.0, < 8.0.10024.0 | ≥ 8.0, < 8.0.14014.0 | ≥ 9.0, < 9.0.10012.0 | ≥ 9.0, < 9.0.14008.0 | ≥ 10.0, < 10.0.10018.0 | ≥ 10.0, < 10.0.14007.0 | ≥ 10.1, < 10.1.10014.0
- nod32_antivirus< 17.0.10.0
2 vendors · 19 products
References
5 links- support.eset.com/en/…Vendor Advisory