Endpoint and server security
CVE-2024-2003: Local Privilege Escalation in Quarantine of ESET products for Windows
Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 3.1 7.3
EPSS0.31%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| ESET NOD32 Antivirus 0 | 1610 or later |
| ESET Internet Security 0 | 1610 or later |
| ESET Smart Security Premium 0 | 1610 or later |
| ESET Security Ultimate 0 | 1610 or later |
| ESET Small Business Security 0 | 1610 or later |
| ESET Safe Server 0 | 1610 or later |
| ESET Endpoint Antivirus for Windows 0 | 1610 or later |
| ESET Endpoint Security for Windows 0 | 1610 or later |
| ESET Server Security for Windows Server 0 | 1610 or later |
| ESET Mail Security for Microsoft Exchange Server 0 | 1610 or later |
| ESET Mail Security for IBM Domino 0 | 1610 or later |
| ESET Security for Microsoft SharePoint Server 0 | 1610 or later |
| ESET File Security for Microsoft Azure 0 | 1610 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.