Description
Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ESET, spol. s.r.o | ESET NOD32 Antivirus | ≤ 18.1.13.0 | — |
| ESET, spol. s.r.o | ESET Internet Security | ≤ 18.1.13.0 | — |
| ESET, spol. s.r.o | ESET Smart Security Premium | ≤ 18.1.13.0 | — |
| ESET, spol. s.r.o | ESET Security Ultimate | ≤ 18.1.13.0 | — |
| ESET, spol. s.r.o | ESET Endpoint Antivirus for Windows | ≤ 12.0.2049.0, ≤ 11.1.2059.0 | — |
| ESET, spol. s.r.o | ESET Endpoint Security for Windows | ≤ 12.0.2049.0, ≤ 11.1.2059.0 | — |
| ESET, spol. s.r.o | ESET Small Business Security | ≤ 18.1.13.0 | — |
| ESET, spol. s.r.o | ESET Safe Server | ≤ 18.1.13.0 | — |
| ESET, spol. s.r.o | ESET Server Security for Windows Server | ≤ 12.0.12004.0, ≤ 11.1.12009.1 | — |
| ESET, spol. s.r.o | ESET Mail Security for Microsoft Exchange Server | ≤ 12.0.10003.0, ≤ 11.1.10011.0 | — |
| ESET, spol. s.r.o | ESET Security for Microsoft SharePoint Server | ≤ 12.0.15004.0, ≤ 11.1.15003.0 | — |
Advisories 1
- WID-SEC-2025-1604 ESET Endpoint Security: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Jul 20, 2025