Description
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | ≤ 18.0.12.0 | — |
| ESET, spol. s r.o. | ESET Internet Security | ≤ 18.0.12.0 | — |
| ESET, spol. s r.o. | ESET Smart Security Premium | ≤ 18.0.12.0 | — |
| ESET, spol. s r.o. | ESET Security Ultimate | ≤ 18.0.12.0 | — |
| ESET, spol. s r.o. | ESET Endpoint Antivirus for Windows | ≤ 12.0.2038.0, ≤ 11.1.2053.2 | — |
| ESET, spol. s r.o. | ESET Endpoint Security for Windows | ≤ 12.0.2038.0, ≤ 11.1.2053.2 | — |
| ESET, spol. s r.o. | ESET Small Business Security | ≤ 18.0.12.0 | — |
| ESET, spol. s r.o. | ESET Safe Server | ≤ 18.0.12.0 | — |
| ESET, spol. s r.o. | ESET Server Security for Windows Server | ≤ 11.1.12005.2 | — |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | ≤ 11.1.10008.0, ≤ 11.0.10008.0, ≤ 10.1.10014.0 | — |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | ≤ 11.1.15001.0, ≤ 11.0.15004.0, ≤ 10.0.15005.1 | — |
Advisories 1
- WID-SEC-2025-0737 ESET NOD32 Antivirus, Endpoint Security and Server Security: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Apr 7, 2025