Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-5028

Arbitrary file deletion vulnerability in ESET product installers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ESET

Description

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ESET, spol. s.r.o ESET NOD32 Antivirus

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Internet Security

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Smart Security Premium

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Security Ultimate

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Endpoint Antivirus for Windows

Default version status: unaffected

  • 0 to ≤ 12.0.2049.0affected
  • 0 to ≤ 11.1.2059.0affected

ESET, spol. s.r.o ESET Endpoint Security for Windows

Default version status: unaffected

  • 0 to ≤ 12.0.2049.0affected
  • 0 to ≤ 11.1.2059.0affected

ESET, spol. s.r.o ESET Small Business Security

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

ESET, spol. s.r.o ESET Safe Server

Default version status: unaffected

  • 0 to ≤ 18.1.13.0affected

References