Eset Endpoint Security — known CVE vulnerabilities

Every CVE whose affected-product data names Eset Endpoint Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2023-3160 — CVSS 7.8 (high): The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files…
• CVE-2024-0353 — CVSS 7.8 (high): Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having…
• CVE-2019-16519 — CVSS 7.8 (high): ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature…
• CVE-2020-11446 — CVSS 7.8 (high): ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET…
• CVE-2021-37852 — CVSS 7.8 (high): ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate…
• CVE-2023-5594 — CVSS 7.5 (high): Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using…
• CVE-2021-37851 — CVSS 7.3 (high): Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer…
• CVE-2022-27167 — CVSS 7.1 (high): Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features…
• CVE-2014-4973 — CVSS 6.9 (medium): The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart…
• CVE-2024-3779 — CVSS 6.1 (medium): Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s…
• CVE-2016-9892 — CVSS 5.9 (medium): The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not…
• CVE-2021-37850 — CVSS 5.5 (medium): ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop…
• CVE-2020-26941 — CVSS 5.5 (medium): A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of…
• CVE-2023-7043 — CVSS 3.3 (low): Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT…