Priority HIGH 65
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Com…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9815 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99992 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Co…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99854 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ika…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99908 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9998 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 64
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.93457 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 64
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engin…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.96857 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 63
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scann…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.92229 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 63
The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, K7 AntiVirus 9.77.3565,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.8932 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 54
Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SIS_FILE_M…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08881 · Published 2016-04-08 · No fix listed CWE-787
Priority MEDIUM 54
The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.59319 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 54
The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMajor field.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.59319 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 46
ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, an…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03468 · Published 2008-12-12 · No fix listed CWE-20
Priority MEDIUM 45
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0169 · Published 2020-03-05 · No fix listed CWE-436
Priority MEDIUM 44
ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02241 · Published 2008-12-12 · No fix listed CWE-20
Priority MEDIUM 43
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
CVSS 4.0HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.02073 · Published 2025-04-07 · No fix listed CWE-427
Priority MEDIUM 42
Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05578 · Published 2007-07-25 · No fix listed CWE-362
Priority LOW 38
Improper Privilege Management vulnerability in ESET AV Remover (standalone) allows Privilege Escalation via especially crafted RPC.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-09-09 · No fix listed CWE-269
Priority LOW 38
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00143 · Published 2026-07-24 · No fix listed CWE-269
Priority LOW 38
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2026-07-24 · No fix listed CWE-269
Priority LOW 38
A local privilege escalation vulnerability in ESET Inspect Connector.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2026-07-16 · No fix listed CWE-269
Priority LOW 38
The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2024-09-27 · No fix listed CWE-1386
Priority LOW 37
An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send…
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00097 · Published 2026-10-30 · No fix listed CWE-284
Priority LOW 37
Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL.
CVSS 4.0HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2026-01-30 · No fix listed CWE-269
Priority LOW 37
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00551 · Published 2024-02-15 · No fix listed CWE-269
Load more