Endpoint and server security
CVE-2026-10610: Local privilege escalation in ESET security applications for macOS
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 4.0 8.5
EPSS0.14%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| ESET Endpoint Security for macOS (MacOS) 9.1 to 9.1.2500.0 | 9.1.3100.0 or later |
| ESET Endpoint Security for macOS (MacOS) 9.0 to 9.0.5400.0 | version 9.0.6400.0 or later |
| ESET Endpoint Security for macOS (MacOS) 8.1 to 8.1.200.0 | 8.1.300.0 or later |
| ESET Endpoint Security for macOS (MacOS) 0 to 8.0.7200.0 | Upgrade past 8.0.7200.0; see the advisory |
| ESET Cyber Security for macOS (MacOS) 0 to 9.0.5300.0 | 9.0.6300.0 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.