Endpoint and server security
CVE-2022-27167: Arbitrary File Deletion in ESET products for Windows
Privilege escalation vulnerability in Windows products of ESET, spol.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| ESET NOD32 Antivirus 11.2 | 15.1.12.0 or later |
| ESET Internet Security 11.2 | 15.1.12.0 or later |
| ESET Smart Security Premium 11.2 | 15.1.12.0 or later |
| ESET Endpoint Antivirus 6.0 | 8.0.2053.0, 8.1.2050.0 or later |
| ESET Endpoint Security 6.0 | 8.0.2053.0, 8.1.2050.0 or later |
| ESET Server Security for Microsoft Windows Server 8.0 | 9.0.12012.0 or later |
| ESET File Security for Microsoft Windows Server 6.0 8 | See the advisory |
| ESET Mail Security for Microsoft Exchange Server 6.0 | 8.0.10020.0 or later |
| ESET Mail Security for IBM Domino 6.0 | 8.0.14011.0 or later |
| ESET Security for Microsoft SharePoint Server 6.0 | 8.0.15009.0 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.