Endpoint and server security
CVE-2024-11859: DLL Search Order Hijacking in ESET products for Windows
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 4.0 8.4
EPSS2.1%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| ESET NOD32 Antivirus 0 to 18.0.12.0 | Upgrade past 18.0.12.0; see the advisory |
| ESET Internet Security 0 to 18.0.12.0 | Upgrade past 18.0.12.0; see the advisory |
| ESET Smart Security Premium 0 to 18.0.12.0 | Upgrade past 18.0.12.0; see the advisory |
| ESET Security Ultimate 0 to 18.0.12.0 | Upgrade past 18.0.12.0; see the advisory |
| ESET Endpoint Antivirus for Windows 0 to 12.0.2038.0 | Upgrade past 12.0.2038.0; see the advisory |
| ESET Endpoint Antivirus for Windows 0 to 11.1.2053.2 | Upgrade past 11.1.2053.2; see the advisory |
| ESET Endpoint Security for Windows 0 to 12.0.2038.0 | Upgrade past 12.0.2038.0; see the advisory |
| ESET Endpoint Security for Windows 0 to 11.1.2053.2 | Upgrade past 11.1.2053.2; see the advisory |
| ESET Small Business Security 0 to 18.0.12.0 | Upgrade past 18.0.12.0; see the advisory |
| ESET Safe Server 0 to 18.0.12.0 | Upgrade past 18.0.12.0; see the advisory |
| ESET Server Security for Windows Server 0 to 11.1.12005.2 | Upgrade past 11.1.12005.2; see the advisory |
| ESET Mail Security for Microsoft Exchange Server 0 to 11.1.10008.0 | Upgrade past 11.1.10008.0; see the advisory |
| ESET Mail Security for Microsoft Exchange Server 0 to 11.0.10008.0 | Upgrade past 11.0.10008.0; see the advisory |
| ESET Mail Security for Microsoft Exchange Server 0 to 10.1.10014.0 | Upgrade past 10.1.10014.0; see the advisory |
| ESET Security for Microsoft SharePoint Server 0 to 11.1.15001.0 | Upgrade past 11.1.15001.0; see the advisory |
| ESET Security for Microsoft SharePoint Server 0 to 11.0.15004.0 | Upgrade past 11.0.15004.0; see the advisory |
| ESET Security for Microsoft SharePoint Server 0 to 10.0.15005.1 | Upgrade past 10.0.15005.1; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.