Approved changes feed: RSS · Atom

cpe:2.3:a:eset,_spol._s_r.o.:eset_endpoint_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEset, Spol. S R.O. (1d876d56-dcc7-58b4-843b-d61fad418180)
ProductEset Endpoint Security (27742671-ba00-551f-947f-14bf9fabacef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7043 vulnerable 2026-06-03 14:53:59.802572 Unquoted path privilege vulnerability in ESET products for Windows
LOW (3.3)
Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.
Published: 2024-01-31T12:51:38.253Z
Updated: 2024-10-17T17:54:28.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5594 not_vulnerable 2026-06-03 14:53:49.049362 Improper following of a certificate's chain of trust in ESET security products
HIGH (7.5)
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
Published: 2023-12-21T11:30:41.256Z
Updated: 2024-08-02T08:07:32.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3160 not_vulnerable 2026-06-03 14:52:40.079873 Local privilege escalation in security products for Windows
HIGH (7.8)
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.
Published: 2023-08-14T09:27:02.427Z
Updated: 2024-10-09T20:04:15.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27167 vulnerable 2026-06-03 14:46:45.596857 Arbitrary File Deletion in ESET products for Windows
HIGH (7.1)
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
Published: 2022-05-10T19:43:59.570Z
Updated: 2024-09-16T21:56:50.610Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37851 vulnerable 2026-06-03 14:45:01.172171 Local Privilege Escalation in ESET product for Windows
HIGH (7.3)
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
Published: 2022-05-11T14:08:03.466Z
Updated: 2024-09-16T22:51:23.644Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.