Denial-of-service vulnerability in ESET security products for Windows
Priority LOW 29CWE-732Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00135 2nd percentileScored 2026-11-07
Fix Fixed ESET NOD32 Antivirus (ESET): 1496ESET Internet Security (ESET): 1496+11 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Internet Security | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Smart Security Premium | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Security Ultimate | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Small Business Security | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Safe Server | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Endpoint Antivirus | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Endpoint Security for Windows | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Server Security for Windows Server | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Mail Security for IBM Domino | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | — | 1496 | Patch available | CNA |
| ESET, spol. s r.o. | ESET File Security for Microsoft Azure | — | 1496 | Patch available | CNA |
- ESET NOD32 Antivirus VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Internet Security VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Smart Security Premium VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Security Ultimate VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Small Business Security VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Safe Server VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Endpoint Antivirus VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Endpoint Security for Windows VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Server Security for Windows Server VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Mail Security for Microsoft Exchange Server VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Mail Security for IBM Domino VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET Security for Microsoft SharePoint Server VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
- ESET File Security for Microsoft Azure VendorESET, spol. s r.o. Affected — Fixed in 1496 Patch available CNA
Remediation
- Fix · CNA ESET NOD32 Antivirus (ESET) Fixed in 1496
- Fix · CNA ESET Internet Security (ESET) Fixed in 1496
- Fix · CNA ESET Smart Security Premium (ESET) Fixed in 1496
- Fix · CNA ESET Security Ultimate (ESET) Fixed in 1496
- Fix · CNA ESET Small Business Security (ESET) Fixed in 1496
- Fix · CNA ESET Safe Server (ESET) Fixed in 1496
- Fix · CNA ESET Endpoint Antivirus (ESET) Fixed in 1496
- Fix · CNA ESET Endpoint Security for Windows (ESET) Fixed in 1496
- Fix · CNA ESET Server Security for Windows Server (ESET) Fixed in 1496
- Fix · CNA ESET Mail Security for Microsoft Exchange Server (ESET) Fixed in 1496
- Fix · CNA ESET Mail Security for IBM Domino (ESET) Fixed in 1496
- Fix · CNA ESET Security for Microsoft SharePoint Server (ESET) Fixed in 1496
- Fix · CNA ESET File Security for Microsoft Azure (ESET) Fixed in 1496
Timeline
- 2026-10-02 Threatist record created from CVE-2025-4952
- 2026-10-03 Alias added: GHSA-m69p-r3h8-6wpr
References
More ESET, spol. s r.o. vulnerabilities
- TI-2012-01283 The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus… CVSS 2.0MEDIUM 4.3
- TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
- TI-2012-01279 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!… CVSS 2.0MEDIUM 4.3
- TI-2012-01278 The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00… CVSS 2.0MEDIUM 4.3
- TI-2012-01265 The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat… CVSS 2.0MEDIUM 4.3
- TI-2012-01244 The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2025-4952 · CVE Program
- CVE-2025-4952 · NVD
- FIRST EPSS
- GHSA-m69p-r3h8-6wpr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences