Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-2425

TOCTOU race condition vulnerability in ESET products on Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ESET

Description

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ESET, spol. s.r.o ESET NOD32 Antivirus

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Internet Security

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Smart Security Premium

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Security Ultimate

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Endpoint Antivirus for Windows

Default version status: unaffected

  • 0 to ≤ 12.0.2049.0affected
  • 0 to ≤ 11.1.2059.0affected

ESET, spol. s.r.o ESET Endpoint Security for Windows

Default version status: unaffected

  • 0 to ≤ 12.0.2049.0affected
  • 0 to ≤ 11.1.2059.0affected

ESET, spol. s.r.o ESET Small Business Security

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Safe Server

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Server Security for Windows Server

Default version status: unaffected

  • 0 to ≤ 12.0.12004.0affected
  • 0 to ≤ 11.1.12009.1affected

ESET, spol. s.r.o ESET Mail Security for Microsoft Exchange Server

Default version status: unaffected

  • 0 to ≤ 12.0.10003.0affected
  • 0 to ≤ 11.1.10011.0affected

ESET, spol. s.r.o ESET Security for Microsoft SharePoint Server

Default version status: unaffected

  • 0 to ≤ 12.0.15004.0affected
  • 0 to ≤ 11.1.15003.0affected

References