ES
Product
Endpoint Security
14
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 5Low 0
Watch
Add Endpoint Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5594 | 8.6 | Dec 21 | Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted Affected: All versions, or not specified |
| CVE-2024-0353 | 7.8 | Feb 15 | Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission Affected: before 8.1.2062.0; 9.0 before 9.1.2071.0; 10.0 before 10.0.2052.0; 10.1 before 10.1.2063.0; 11.0 before 11.0.2032.0 |
| CVE-2023-3160 | 7.8 | Aug 14 | The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions Affected: All versions, or not specified |
| CVE-2021-37851 | 7.8 | May 11 | Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher… Affected: 6.0 before 8.0.2053.0; 8.1 before 8.1.2050.0; 9.0 before 9.0.2046.0 |
| CVE-2021-37852 | 7.8 | Feb 9 | ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT… Affected: 6.6.2046.0 before 7.3.2055.0; 8.0 before 8.0.2028.3; 8.1 before 8.1.2031.4; 9.0 before 9.0.2032.6 |
| CVE-2020-11446 | 7.8 | Apr 29 | ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to… Affected: All versions, or not specified |
| CVE-2019-16519 | 7.8 | Oct 14 | ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks Affected: through 6.7.900.0 |
| CVE-2022-27167 | 7.1 | May 10 | Privilege escalation vulnerability in Windows products of ESET, spol Affected: 6.0 before 8.0.2053.0; 8.1 before 8.1.2050.0; 9.0 before 9.0.2046.0 |
| CVE-2016-9892 | 5.9 | Mar 2 | The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from… Affected: 6.3.70.1 |
| CVE-2024-3779 | 5.5 | Jul 16 | Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided… Affected: before 11.1.2039.0 |
| CVE-2023-7043 | 5.5 | Jan 31 | Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions Affected: 10.1.2046.0 before 11.0.2032.0 |
| CVE-2021-37850 | 5.5 | Nov 8 | ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling… Affected: through 6.10.910.0 |
| CVE-2020-26941 | 5.5 | Jan 26 | A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of any file via a symlink, due to insecure… Affected: through 7.3 |
| CVE-2014-4973 | – | Sep 23 | The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products… Affected: 5.0.2113; 5.0.2122; 5.0.2126; 5.0.2214; 5.0.2225; 5.0.2228 |
Showing 14