CVE-2020-10193

The CVE-2020-10193 issue affects the ESET Archive Support Module prior to version 1294, enabling a virus-detection bypass via crafted RAR Compression Information in an archive. Impacted products include Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber ...

CVE-2020-10180

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android, Smart TV Security,...

CVE-2020-10180

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android, Smart TV Security,...

Design/Logic Flaw

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android, Smart TV Security,...

CVE-2020-10180

The CVE-2020-10180 issue concerns the ESET AV parsing engine where a crafted BZ2 Checksum field in an archive bypasses virus detection. Affected products and versions include Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Sec...

CVE-2020-10180

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android, Smart TV Security,...

CVE-2019-17549

ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop kill ESET processes. An attacker can abuse this bug to stop the protection from ESET and launch his attack...

CVE-2019-19792

A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files...

CVE-2019-19792

A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files...

Code injection

A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files...

Design/Logic Flaw

ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop kill ESET processes. An attacker can abuse this bug to stop the protection from ESET and launch his attack...

CVE-2019-19792

A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files...

CVE-2019-19792

CVE-2019-19792 affects ESET Cyber Security for macOS up to version 6.8.300.0 . The issue is a permissions flaw that lets a local attacker escalate privileges by appending data to root-owned files. Exploitation details are not provided beyond the described escalation path. Remediation in the conne...

CVE-2019-17549

ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop kill ESET processes. An attacker can abuse this bug to stop the protection from ESET and launch his attack...

CVE-2019-17549

CVE-2019-17549 affects ESET Cyber Security prior to 6.8.1.0. The vulnerability allows a denial-of-service that can stop (kill) ESET processes, disabling protection. The available sources state that an attacker can abuse this to halt security monitoring, but the provided documents do not include s...

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices

Cybersecurity researchers today uncovered a new high-severity hardware vulnerability residing in the widely-used Wi-Fi chips manufactured by Broadcom and Cypress—apparently powering over a billion devices, including smartphones, tablets, laptops, routers, and IoT gadgets. Dubbed 'Kr00k' and track...

CVE-2020-9264

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for...

Design/Logic Flaw

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for...

CVE-2020-9264

The CVE refers to a vulnerability in the ESET Archive Support Module present in versions before 1296, which allows a virus-detection bypass via a crafted Compression Information Field in ZIP archives. Affected products include Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Secu...

CVE-2020-9264

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for...