CVE-2021-37850

CVE-2021-37850 affects ESET consumer and business products for macOS. A local user can stop the ESET daemon, disabling protection until a reboot. Documented impact is a DoS-like loss of protection rather than remote code execution. Affected components are the ESET macOS services/daemons, with roo...

CVE-2019-19792

CVE-2019-19792 affects ESET Cyber Security for macOS up to version 6.8.300.0 . The issue is a permissions flaw that lets a local attacker escalate privileges by appending data to root-owned files. Exploitation details are not provided beyond the described escalation path. Remediation in the conne...

CVE-2019-16519

CVE-2019-16519 affects ESET Cyber Security 6.7.900.0 for macOS. The vulnerability arises from abusing an undocumented feature in scheduled tasks, enabling a local attacker to execute unauthorized commands as root. The description is repeated across NVD and multiple vendor/ national vulnerability ...

CVE-2023-2847

CVE-2023-2847 describes a local privilege escalation in ESET products for Linux/macOS caused by improper privilege management. A user with lower privileges could trigger actions with root-level privileges; affected components include ESET Server Security for Linux, Endpoint Antivirus for Linux/ma...

CVE-2020-10193

The CVE-2020-10193 issue affects the ESET Archive Support Module prior to version 1294, enabling a virus-detection bypass via crafted RAR Compression Information in an archive. Impacted products include Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber ...

CVE-2020-10180

The CVE-2020-10180 issue concerns the ESET AV parsing engine where a crafted BZ2 Checksum field in an archive bypasses virus detection. Affected products and versions include Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Sec...

CVE-2019-17549

CVE-2019-17549 affects ESET Cyber Security prior to 6.8.1.0. The vulnerability allows a denial-of-service that can stop (kill) ESET processes, disabling protection. The available sources state that an attacker can abuse this to halt security monitoring, but the provided documents do not include s...

CVE-2020-9264

The CVE refers to a vulnerability in the ESET Archive Support Module present in versions before 1296, which allows a virus-detection bypass via a crafted Compression Information Field in ZIP archives. Affected products include Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Secu...