CVE-2025-4952

Denial-of-service vulnerability in ESET security products for Windows

CVSS 6.8 MEDIUMEPSS 0.1%CWE-732

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

ESET · ESET Endpoint Antivirus ESET · ESET Endpoint Security for Windows ESET · ESET File Security for Microsoft Azure ESET · ESET Internet Security ESET · ESET Mail Security for IBM Domino ESET · ESET Mail Security for Microsoft Exchange Server ESET · ESET NOD32 Antivirus ESET · ESET Safe Server ESET · ESET Security for Microsoft SharePoint Server ESET · ESET Security Ultimate ESET · ESET Server Security for Windows Server ESET · ESET Small Business Security ESET · ESET Smart Security Premium

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed