IS
Product
Internet Security
13
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 4Low 0
Watch
Add Internet Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5594 | 8.6 | Dec 21 | Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted Affected: All versions, or not specified |
| CVE-2024-0353 | 7.8 | Feb 15 | Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission Affected: before 17.0.10.0 |
| CVE-2023-3160 | 7.8 | Aug 14 | The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions Affected: All versions, or not specified |
| CVE-2021-37851 | 7.8 | May 11 | Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher… Affected: 11.2 before 15.1.12.0 |
| CVE-2021-37852 | 7.8 | Feb 9 | ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT… Affected: 10.0.337.1 before 15.0.18.0 |
| CVE-2020-11446 | 7.8 | Apr 29 | ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to… Affected: All versions, or not specified |
| CVE-2018-0649 | 7.8 | Sep 7 | Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc Affected: All versions, or not specified |
| CVE-2020-10193 | 7.5 | Mar 6 | ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive Affected: before 1294 |
| CVE-2022-27167 | 7.1 | May 10 | Privilege escalation vulnerability in Windows products of ESET, spol Affected: 11.2 before 15.1.12.0 |
| CVE-2024-3779 | 5.5 | Jul 16 | Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided… Affected: before 17.2.7.0 |
| CVE-2023-7043 | 5.5 | Jan 31 | Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions Affected: 16.1.14.0 before 17.0.15.0 |
| CVE-2020-26941 | 5.5 | Jan 26 | A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of any file via a symlink, due to insecure… Affected: through 13.2; 1294 |
| CVE-2020-9264 | 5.5 | Feb 18 | ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive Affected: before 1296 |
Showing 13
