Vendor
ESET vulnerabilities
24 advisories tracked, 0 exploited in the wild according to CISA, 7 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
Nothing from ESET meets this bar right now: no CVE in CISA's exploited list, and none with a high exploitation score.
Products covered
Select a product to see only its advisories.
- Endpoint and server securityEndpoint Security and Antivirus, Server and File Security, and encryption19 tracked
- Mail and SharePoint securityMail Security for Exchange and Domino, and Security for SharePoint10 tracked
- ESET PROTECT and InspectThe management console and agent, and the EDR connector4 tracked
- Home productsNOD32, Internet Security, Smart Security and Cyber Security for macOS17 tracked
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-12858 | Home products | Local privilege escalation vulnerability in ESET AV Remover | HIGH 8.5 | 0.10% | – | |
| CVE-2026-10610 | Endpoint and server security | Local privilege escalation in ESET security applications for macOS | HIGH 8.5 | 0.14% | – | |
| CVE-2026-7483 | Endpoint and server security | Local privilege escalation in ESET security applications for macOS | HIGH 8.5 | 0.13% | – | |
| CVE-2026-6423 | ESET PROTECT and Inspect | Local privilege escalation via unauthenticated ALPC in ESET Inspect Connector | HIGH 8.5 | 0.17% | – | |
| CVE-2026-6424 | Endpoint and server security | Use-after-free vulnerability in ESET security products for Linux | MEDIUM 6.7 | 0.16% | – | |
| CVE-2025-13818 | ESET PROTECT and Inspect | Local privilege escalation in ESET Management Agent for Windows | HIGH 8.3 | 0.13% | – | |
| CVE-2025-13176 | ESET PROTECT and Inspect | Local privilege escalation in ESET Inspect Connector for Windows | HIGH 8.4 | 0.16% | – | |
| CVE-2025-8352 | ESET PROTECT and Inspect | Denial-of-service vulnerability in ESET PROTECT On-Prem | MEDIUM 6.9 | 0.27% | – | |
| CVE-2025-2425 | Endpoint and server security | TOCTOU race condition vulnerability in ESET products on Windows | MEDIUM 5.1 | 0.11% | – | |
| CVE-2025-5028 | Endpoint and server security | Arbitrary file deletion vulnerability in ESET product installers | MEDIUM 6.8 | 0.15% | – | |
| CVE-2024-11859 | Endpoint and server security | DLL Search Order Hijacking in ESET products for Windows | HIGH 8.4 | 2.1% | – | |
| CVE-2024-7400 | Endpoint and server security | Local privilege escalation in ESET products for Windows | HIGH 8.5 | 0.22% | – | |
| CVE-2024-6654 | Endpoint and server security | Denial of Service vulnerability in ESET products for macOS | MEDIUM 6.8 | 0.20% | – | |
| CVE-2024-3779 | Endpoint and server security | Denial of Service in ESET products for Windows | MEDIUM 6.1 | 0.20% | – | |
| CVE-2024-2003 | Endpoint and server security | Local Privilege Escalation in Quarantine of ESET products for Windows | HIGH 7.3 | 0.31% | – | |
| CVE-2024-0353 | Endpoint and server security | Local privilege escalation in Windows products | HIGH 7.8 | 0.55% | – | |
| CVE-2023-7043 | Endpoint and server security | Unquoted path privilege vulnerability in ESET products for Windows | LOW 3.3 | 0.28% | – | |
| CVE-2023-2847 | Endpoint and server security | Local privilege escalation in ESET products for Linux and MacOS | HIGH 7.8 | 0.15% | – | |
| CVE-2022-2402 | Endpoint and server security | Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows | MEDIUM 6.5 | 0.20% | – | |
| CVE-2022-27167 | Endpoint and server security | Arbitrary File Deletion in ESET products for Windows | HIGH 7.1 | 0.19% | – | |
| CVE-2021-37851 | Endpoint and server security | Local Privilege Escalation in ESET product for Windows | HIGH 7.3 | 0.21% | – | |
| CVE-2022-0615 | Endpoint and server security | Use-after-free vulnerability in ESET products for Linux | MEDIUM 5.9 | 0.83% | – | |
| CVE-2021-37852 | Endpoint and server security | LPE in ESET products for Windows | HIGH 7.8 | 0.60% | – | |
| CVE-2021-37850 | Endpoint and server security | Denial of service in ESET for Mac products | MEDIUM 5.5 | 0.23% | – |
Sources: ESET security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.