CVE-2024-7400

CVE-2024-7400 describes a local privilege escalation in ESET products for Windows where an attacker could misuse ESET’s file operations during the removal of a detected file to delete files without proper permissions. The issue affects multiple ESET products on Windows (e.g., NOD32 Antivirus, Int...

ESET多款产品 安全漏洞

ESET Security Ultimate and others are products of ESET Slovakia.ESET Security Ultimate is a complete security solution.ESET NOD32 Antivirus is an antivirus program.ESET Internet Security is an advanced with anti-virus ESET Internet Security is an advanced antivirus program with antivirus features...

ESET Cyber Security和ESET Endpoint Antivirus 安全漏洞

ESET Cyber Security and ESET Endpoint Antivirus are both products of ESET Slovakia.ESET Cyber Security is an integrated security suite solution. It is used to proactively eliminate viruses, worms, Trojans, spyware, adware, rootkits, and other attacks brought on by the Internet without affecting...

The vulnerability of ESET antivirus protection, related to deficiencies in access control, allows attackers to delete arbitrary files and increase their privileges.

The vulnerability of ESET antivirus protection lies in the lack of access control mechanisms. Exploiting this vulnerability could allow a hacker to delete arbitrary files and increase their privileges...

PT-2024-6488 · Eset · Eset Products For Macos

Name of the Vulnerable Software and Affected Versions: ESET Products for macOS affected versions not specified Description: The issue allows a user logged on to the system to perform a denial-of-service attack, which could be misused to disable the protection of the ESET security product and caus...

PT-2024-24: Local privilege escalation (LPE) in ESET products

The vulnerability was identified in the following products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate ESET Small Business Security and ESET Safe Server ESET Endpoint Antivirus and ESET Endpoint Security for Windows ESET Server Security for...

APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor

A South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw in Kingsoft WPS Office to deploy a bespoke backdoor dubbed SpyGlace. The activity has been attributed to a threat actor dubbed APT-C-60, according to cybersecuri...

Telegram Android Vulnerability “EvilVideo” Sends Malware as Videos

EvilVideo exploit in Telegram for Android lets attackers send malware disguised as videos. ESET discovered this zero-day vulnerability,…...

Alert: HotPage Adware Disguised as Ad Blocker Installs Malicious Kernel Driver

Cybersecurity researchers have shed light on an adware module that purports to block ads and malicious websites, while stealthily offloading a kernel driver component that grants attackers the ability to run arbitrary code with elevated permissions on Windows hosts. The malware, dubbed HotPage,...

CVE-2024-3779

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met...

CVE-2024-3779 Denial of Service in ESET products for Windows

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met...

CVE-2024-3779 Denial of Service in ESET products for Windows

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met...

ESET NOD32 Antivirus 17.2.7.0 Unquoted Service Path

Exploit Title: ESET NOD32 Antivirus 17.2.7.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-07-09 Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor : https://www.eset.com Version : 17.2.7.0 Tested on OS: Microsoft Windows...

ESET Smart Security Premium Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ESET Smart Security Premium. User interaction on the part of an administrator is required to exploit this vulnerability. The specific flaw exists within the ESET Service. By creating a symbolic link, an...

CVE-2024-2003

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine...

CVE-2024-2003 Local Privilege Escalation in Quarantine of ESET products for Windows

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine...

CVE-2024-2003 Local Privilege Escalation in Quarantine of ESET products for Windows

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine...

CVE-2024-2003

CVE-2024-2003 affects ESET products (notably ESET Smart Security Premium) with a local privilege escalation during quarantine restore operations. The vulnerability arises from abusing the ESET service during restore of quarantined items; an attacker with local access and required user interaction...

Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

The threat actor known as Arid Viper has been attributed to a mobile espionage campaign that leverages trojanized Android apps to deliver a spyware strain dubbed AridSpy. "The malware is distributed through dedicated websites impersonating various messaging apps, a job opportunity app, and a...

ESET NOD32 Antivirus 17.1.11.0 Unquoted Service Path Vulnerability

Exploit Title: ESET NOD32 Antivirus 17.1.11.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-04-27 Contact: email protected Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor : https://www.eset.com Version : 17.1.11.0 Tested on OS: Microsoft Windows 10 p...