Local privilege escalation in security products for Windows
Priority LOW 35CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.
Summary
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00176 7th percentileScored 2026-11-07
Fix Fixed ESET NOD32 Antivirus (ESET, spol. s r.o.): 1463ESET Internet Security (ESET, spol. s r.o.): 1463+7 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Internet Security | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Smart Security Premium | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Endpoint Antivirus | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Endpoint Security | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Server Security for Windows Server (File Security) | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Mail Security for IBM Domino | — | 1463 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | — | 1463 | Patch available | CNA |
- ESET NOD32 Antivirus VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Internet Security VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Smart Security Premium VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Endpoint Antivirus VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Endpoint Security VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Server Security for Windows Server (File Security) VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Mail Security for Microsoft Exchange Server VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Mail Security for IBM Domino VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
- ESET Security for Microsoft SharePoint Server VendorESET, spol. s r.o. Affected — Fixed in 1463 Patch available CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:eset:endpoint_antivirus:-:*:*:*:*:-:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:endpoint_security:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:internet_security:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:mail_security:-:*:*:*:*:exchange_server:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:nod32:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:security:-:*:*:*:*:sharepoint_server:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:server_security:-:*:*:*:*:windows_server:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
| cpe:2.3:a:eset:smart_security:-:*:*:*:premium:*:*:* | not specified by NVD | Vulnerable | ESET, spol. s r.o. |
- cpe:2.3:a:eset:endpoint_antivirus:-:*:*:*:*:-:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:endpoint_security:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:internet_security:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:mail_security:-:*:*:*:*:exchange_server:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:nod32:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:security:-:*:*:*:*:sharepoint_server:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:server_security:-:*:*:*:*:windows_server:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
- cpe:2.3:a:eset:smart_security:-:*:*:*:premium:*:*:* Versions not specified by NVD Vulnerable ·ESET, spol. s r.o.
Remediation
- Fix · CNA ESET NOD32 Antivirus (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Internet Security (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Smart Security Premium (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Endpoint Antivirus (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Endpoint Security (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Server Security for Windows Server (File Security) (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Mail Security for Microsoft Exchange Server (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Mail Security for IBM Domino (ESET, spol. s r.o.) Fixed in 1463
- Fix · CNA ESET Security for Microsoft SharePoint Server (ESET, spol. s r.o.) Fixed in 1463
Timeline
- 2026-10-02 Threatist record created from CVE-2023-3160
- 2026-10-03 Alias added: GHSA-r9qp-q9m8-hww3
References
Advisory 1
More ESET, spol. s r.o. Endpoint Antivirus vulnerabilities
- TI-2024-00320 Local privilege escalation in Windows products CVSS 3.1HIGH 7.8
- TI-2023-05150 Improper following of a certificate's chain of trust in ESET security products CVSS 3.1HIGH 8.6
- TI-2023-02668 Local privilege escalation in ESET products for Linux and MacOS CVSS 3.1HIGH 7.8
- TI-2021-15659 LPE in ESET products for Windows CVSS 3.1HIGH 7.8
- TI-2022-00532 Use-after-free vulnerability in ESET products for Linux CVSS 3.1HIGH 7.5
- TI-2020-09185 ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited… CVSS 3.1HIGH 7.8
Sources
- CVE-2023-3160 · CVE Program
- CVE-2023-3160 · NVD
- FIRST EPSS
- GHSA-r9qp-q9m8-hww3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences