CVE-2024-0353 | BDVDB-2026-224767 Detail
ESET, spol. s r.o.ESET NOD32 Antivirus
Description#
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
- CWE-269 Improper Privilege Management
References#
- https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed
- https://packetstormsecurity.com/files/182464/ESET-NOD32-Antivirus-18.0.12.0-Unquoted-Service-Path.html
- https://packetstormsecurity.com/files/179495/ESET-NOD32-Antivirus-17.2.7.0-Unquoted-Service-Path.html
- https://www.exploit-db.com/exploits/51351
- https://www.exploit-db.com/exploits/51964
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.