CVE-2025-2425

CVE-2025-2425 describes a TOCTOU race condition in ESET security software on Windows that could let an attacker clear the content of an arbitrary file via the installed product. The flaw is rooted in a time-check vs. time-use mismatch within ESET components, enabling a local attacker with low pri...

CVE-2025-2425 TOCTOU race condition vulnerability in ESET products on Windows

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system...

PT-2025-30020 · Eset · Eset Security

Name of the Vulnerable Software and Affected Versions: ESET security software affected versions not specified Description: A time-of-check to time-of-use race condition could allow an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system...

ESET多款产品 安全漏洞

ESET NOD32 Antivirus and others are products of ESET Corporation.ESET NOD32 Antivirus is an antivirus program.ESET Internet Security is an advanced antivirus with antivirus.ESET Smart Security Premium is an antivirus program that includes data encryption, ESET Smart Security Premium is a network...

CVE-2025-5028

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so...

CVE-2025-5028

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so...

CVE-2025-5028

Affected software: ESET security products on Windows. Vulnerable component: installation file/installer. Root cause: installer allows an attacker to delete an arbitrary file without required permissions. Impact: arbitrary file deletion with high impact to confidentiality/integrity per CVSS metric...

CVE-2025-5028 Arbitrary file deletion vulnerability in ESET product installers

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so...

CVE-2025-5028 Arbitrary file deletion vulnerability in ESET product installers

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so...

ESET多款产品 安全漏洞

ESET NOD32 Antivirus and others are products of ESET Corporation.ESET NOD32 Antivirus is an antivirus program.ESET Internet Security is an advanced antivirus with antivirus.ESET Smart Security Premium is an antivirus program that includes data encryption, ESET Smart Security Premium is a network...

PT-2025-29126 · Eset · Eset Security Product

Name of the Vulnerable Software and Affected Versions: ESET security products versions affected versions not specified Description: The installation file of ESET security products on Windows allows an attacker to delete an arbitrary file without the necessary permissions. An attacker with the...

About Cross Site Scripting – MDaemon Email Server (CVE-2024-11182)

About Cross Site Scripting - MDaemon Email Server CVE-2024-11182. An attacker can send an HTML-formatted email containing malicious JavaScript code embedded in an img tag. If the user opens the email in the MDaemon Email Server's web interface, the malicious JavaScript code will execute in the...

CVE-2023-2847

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...

CVE-2021-37850

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot...

CVE-2020-9264

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for...

CVE-2020-26941

A local authenticated low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite deletion of any file via a symlink, due to insecure permissions. The possibility of exploiting this vulnerability is limited and can only take place during the installation...

CVE-2010-5160

Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2015-8841

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SISFILEMULTILANG...

Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization

Threat hunters have exposed the tactics of a China-aligned threat actor called UnsolicitedBooker that targeted an unnamed international organization in Saudi Arabia with a previously undocumented backdoor dubbed MarsSnake. ESET, which first discovered the hacking group's intrusions targeting the...

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner

A Chinese-affiliated threat actor known for its cyber-attacks in Asia has been observed exploiting a security flaw in security software from ESET to deliver a previously undocumented malware codenamed TCESB. "Previously unseen in ToddyCat attacks, TCESB is designed to stealthily execute payloads ...