Read the docs
TI-2022-10293 Aliases CVE-2022-27167GHSA-ffxj-qgwf-8rrm

Arbitrary File Deletion in ESET products for Windows

Priority LOW 30CWE-280Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Why it matters now

EPSS 0.0019 8th percentileScored 2026-11-07
Fix Fixed ESET NOD32 Antivirus (ESET, spol. s r.o.): 15.1.12.0ESET Internet Security (ESET, spol. s r.o.): 15.1.12.0+7 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ESET, spol. s r.o.ESET NOD32 Antivirus11.2 to before 15.1.12.015.1.12.0Patch availableCNA
ESET, spol. s r.o.ESET Internet Security11.2 to before 15.1.12.015.1.12.0Patch availableCNA
ESET, spol. s r.o.ESET Smart Security Premium11.2 to before 15.1.12.015.1.12.0Patch availableCNA
ESET, spol. s r.o.ESET Endpoint Antivirus6.0 to before 9.0.2046.09.0.2046.0Patch availableCNA
ESET, spol. s r.o.ESET Endpoint Security6.0 to before 9.0.2046.09.0.2046.0Patch availableCNA
ESET, spol. s r.o.ESET Server Security for Microsoft Windows Server8.0 to before 9.0.12012.09.0.12012.0Patch availableCNA
ESET, spol. s r.o.ESET File Security for Microsoft Windows Server6.0 8.0.12013.0—No fix listedCNA
ESET, spol. s r.o.ESET Mail Security for Microsoft Exchange Server6.0 to before 8.0.10020.08.0.10020.0Patch availableCNA
ESET, spol. s r.o.ESET Mail Security for IBM Domino6.0 to before 8.0.14011.08.0.14011.0Patch availableCNA
ESET, spol. s r.o.ESET Security for Microsoft SharePoint Server6.0 to before 8.0.15009.08.0.15009.0Patch availableCNA
  • ESET NOD32 Antivirus VendorESET, spol. s r.o. Affected 11.2 to before 15.1.12.0 Fixed in 15.1.12.0 Patch available CNA
  • ESET Internet Security VendorESET, spol. s r.o. Affected 11.2 to before 15.1.12.0 Fixed in 15.1.12.0 Patch available CNA
  • ESET Smart Security Premium VendorESET, spol. s r.o. Affected 11.2 to before 15.1.12.0 Fixed in 15.1.12.0 Patch available CNA
  • ESET Endpoint Antivirus VendorESET, spol. s r.o. Affected 6.0 to before 9.0.2046.0 Fixed in 9.0.2046.0 Patch available CNA
  • ESET Endpoint Security VendorESET, spol. s r.o. Affected 6.0 to before 9.0.2046.0 Fixed in 9.0.2046.0 Patch available CNA
  • ESET Server Security for Microsoft Windows Server VendorESET, spol. s r.o. Affected 8.0 to before 9.0.12012.0 Fixed in 9.0.12012.0 Patch available CNA
  • ESET File Security for Microsoft Windows Server VendorESET, spol. s r.o. Affected 6.0 8.0.12013.0 Fixed in — No fix listed CNA
  • ESET Mail Security for Microsoft Exchange Server VendorESET, spol. s r.o. Affected 6.0 to before 8.0.10020.0 Fixed in 8.0.10020.0 Patch available CNA
  • ESET Mail Security for IBM Domino VendorESET, spol. s r.o. Affected 6.0 to before 8.0.14011.0 Fixed in 8.0.14011.0 Patch available CNA
  • ESET Security for Microsoft SharePoint Server VendorESET, spol. s r.o. Affected 6.0 to before 8.0.15009.0 Fixed in 8.0.15009.0 Patch available CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:*6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:*6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:*6.0 to before 8.0.12013.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:*11.2 to before 15.1.12.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:*6.0 to before 8.0.10020.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:*6.0 to before 8.0.14011.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:*11.2 to before 15.1.12.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint_server:*:*6.0 to before 8.0.15009.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:server_security:*:*:*:*:*:azure:*:*6.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:server_security:*:*:*:*:*:windows_server:*:*8.0 to before 9.0.12012.0VulnerableESET, spol. s r.o.
  • cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* Versions 6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* Versions 6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:* Versions 6.0 to before 8.0.12013.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:* Versions 11.2 to before 15.1.12.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:* Versions 6.0 to before 8.0.10020.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:* Versions 6.0 to before 8.0.14011.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:* Versions 11.2 to before 15.1.12.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint_server:*:* Versions 6.0 to before 8.0.15009.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:server_security:*:*:*:*:*:azure:*:* Versions 6.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:server_security:*:*:*:*:*:windows_server:*:* Versions 8.0 to before 9.0.12012.0 Vulnerable ·ESET, spol. s r.o.
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:eset:smart_security:*:*:*:*:premium:windows:*:*11.2 to before 15.1.12.0VulnerableESET, spol. s r.o.
  • cpe:2.3:a:eset:smart_security:*:*:*:*:premium:windows:*:* Versions 11.2 to before 15.1.12.0 Vulnerable ·ESET, spol. s r.o.

Remediation

  • Fix · CNA ESET NOD32 Antivirus (ESET, spol. s r.o.) Fixed in 15.1.12.0
  • Fix · CNA ESET Internet Security (ESET, spol. s r.o.) Fixed in 15.1.12.0
  • Fix · CNA ESET Smart Security Premium (ESET, spol. s r.o.) Fixed in 15.1.12.0
  • Fix · CNA ESET Endpoint Antivirus (ESET, spol. s r.o.) Fixed in 9.0.2046.0
  • Fix · CNA ESET Endpoint Security (ESET, spol. s r.o.) Fixed in 9.0.2046.0
  • Fix · CNA ESET Server Security for Microsoft Windows Server (ESET, spol. s r.o.) Fixed in 9.0.12012.0
  • Fix · CNA ESET Mail Security for Microsoft Exchange Server (ESET, spol. s r.o.) Fixed in 8.0.10020.0
  • Fix · CNA ESET Mail Security for IBM Domino (ESET, spol. s r.o.) Fixed in 8.0.14011.0
  • Fix · CNA ESET Security for Microsoft SharePoint Server (ESET, spol. s r.o.) Fixed in 8.0.15009.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-27167
  2. 2026-10-03 Alias added: GHSA-ffxj-qgwf-8rrm

References

Advisory 1

  • TI-2024-00320 Local privilege escalation in Windows products CVSS 3.1HIGH 7.8
  • TI-2023-05150 Improper following of a certificate's chain of trust in ESET security products CVSS 3.1HIGH 8.6
  • TI-2023-02960 Local privilege escalation in security products for Windows CVSS 3.1HIGH 7.8
  • TI-2023-02668 Local privilege escalation in ESET products for Linux and MacOS CVSS 3.1HIGH 7.8
  • TI-2021-15659 LPE in ESET products for Windows CVSS 3.1HIGH 7.8
  • TI-2022-00532 Use-after-free vulnerability in ESET products for Linux CVSS 3.1HIGH 7.5
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences