SE
Product
Security
8
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 2Low 0
Watch
Add Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5594 | 8.6 | Dec 21 | Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted Affected: All versions, or not specified |
| CVE-2024-0353 | 7.8 | Feb 15 | Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission Affected: before 7.3.15006.0; before 17.0.10.0; 8.0 before 8.0.15012.0; 9.0 before 9.0.15006.0; 10.0 before 10.0.15005.0 |
| CVE-2023-3160 | 7.8 | Aug 14 | The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions Affected: All versions, or not specified |
| CVE-2021-37851 | 7.8 | May 11 | Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher… Affected: 6.0 before 8.0.15009.0 |
| CVE-2021-37852 | 7.8 | Feb 9 | ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT… Affected: 7.0.15008.0 through 8.0.15004.0 |
| CVE-2022-27167 | 7.1 | May 10 | Privilege escalation vulnerability in Windows products of ESET, spol Affected: 6.0 before 8.0.15009.0 |
| CVE-2024-3779 | 5.5 | Jul 16 | Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided… Affected: before 17.2.7.0; before 11.0.15004.0 |
| CVE-2020-26941 | 5.5 | Jan 26 | A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of any file via a symlink, due to insecure… Affected: through 7.2; through 7.2 |
Showing 8
