MS
Product
Mail Security
10
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 3Low 0
Watch
Add Mail Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5594 | 8.6 | Dec 21 | Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted Affected: All versions, or not specified |
| CVE-2024-0353 | 7.8 | Feb 15 | Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission Affected: before 7.3.10018.0; before 7.3.14006.0; 8.0 before 8.0.10024.0; 8.0 before 8.0.14014.0; 9.0 before 9.0.10012.0; 9.0 before 9.0.14008.0; +3 more |
| CVE-2023-3160 | 7.8 | Aug 14 | The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions Affected: All versions, or not specified |
| CVE-2021-37851 | 7.8 | May 11 | Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher… Affected: 6.0 before 8.0.10020.0; 6.0 before 8.0.14011.0 |
| CVE-2021-37852 | 7.8 | Feb 9 | ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT… Affected: 7.0.10019 before 7.3.10014.0; 7.0.14008.0 before 7.3.14003.0; 8.0 before 8.0.14006.0; 8.0.10012.0 before 8.0.10018.0 |
| CVE-2020-11446 | 7.8 | Apr 29 | ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to… Affected: All versions, or not specified |
| CVE-2022-27167 | 7.1 | May 10 | Privilege escalation vulnerability in Windows products of ESET, spol Affected: 6.0 before 8.0.10020.0; 6.0 before 8.0.14011.0 |
| CVE-2024-3779 | 5.5 | Jul 16 | Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided… Affected: through 11.0.10008.0 |
| CVE-2023-7043 | 5.5 | Jan 31 | Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions Affected: 10.1.10012.0 |
| CVE-2020-26941 | 5.5 | Jan 26 | A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of any file via a symlink, due to insecure… Affected: through 7.2; through 7.2 |
Showing 10
