What’s Vulnerable › Vulnerabilities

CVE-2024-0353: Local privilege escalation in Windows products

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-15 · updated 2026-06-17
• Weakness: CWE-269

Description

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.

Affected products

• ESET Endpoint Antivirus: before 8.1.2062.0; from 9.0 before 9.1.2071.0; from 10.0 before 10.0.2052.0; from 10.1 before 10.1.2063.0; from 11.0 before 11.0.2032.0 — fixed in 10.0.2052.0, 10.1.2063.0, 11.0.2032.0, 8.1.2062.0, 9.1.2071.0
• ESET Endpoint Security: before 8.1.2062.0; from 9.0 before 9.1.2071.0; from 10.0 before 10.0.2052.0; from 10.1 before 10.1.2063.0; from 11.0 before 11.0.2032.0 — fixed in 10.0.2052.0, 10.1.2063.0, 11.0.2032.0, 8.1.2062.0, 9.1.2071.0
• ESET File Security: all versions
• ESET Internet Security: before 17.0.10.0 — fixed in 17.0.10.0
• ESET Mail Security: before 7.3.10018.0; before 7.3.14006.0; from 8.0 before 8.0.10024.0; from 8.0 before 8.0.14014.0; from 9.0 before 9.0.10012.0; from 9.0 before 9.0.14008.0 — fixed in 10.0.10018.0, 10.0.14007.0, 10.1.10014.0, 7.3.10018.0, 7.3.14006.0, 8.0.10024.0
• ESET Nod32 Antivirus: before 17.0.10.0 — fixed in 17.0.10.0
• ESET Security: before 7.3.15006.0; before 17.0.10.0; from 8.0 before 8.0.15012.0; from 9.0 before 9.0.15006.0; from 10.0 before 10.0.15005.0 — fixed in 10.0.15005.0, 17.0.10.0, 7.3.15006.0, 8.0.15012.0, 9.0.15006.0
• ESET Server Security: before 7.3.12013.0; from 8.0 before 8.0.12016.0; from 9.0 before 9.0.12019.0; from 10.0 before 10.0.12015.0 — fixed in 10.0.12015.0, 7.3.12013.0, 8.0.12016.0, 9.0.12019.0
• ESET Smart Security: before 17.0.10.0 — fixed in 17.0.10.0

How to fix

Upgrade to a fixed version: ESET Endpoint Antivirus 10.0.2052.0, 10.1.2063.0, 11.0.2032.0, 8.1.2062.0; ESET Endpoint Security 10.0.2052.0, 10.1.2063.0, 11.0.2032.0, 8.1.2062.0; ESET Internet Security 17.0.10.0; ESET Mail Security 10.0.10018.0, 10.0.14007.0, 10.1.10014.0, 7.3.10018.0; ESET Nod32 Antivirus 17.0.10.0; ESET Security 10.0.15005.0, 17.0.10.0, 7.3.15006.0, 8.0.15012.0; ESET Server Security 10.0.12015.0, 7.3.12013.0, 8.0.12016.0, 9.0.12019.0; ESET Smart Security 17.0.10.0. Check the vendor advisory for mitigations.

References

• https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed
• https://packetstormsecurity.com/files/179495/ESET-NOD32-Antivirus-17.2.7.0-Unquoted-Service-Path.html
• https://packetstormsecurity.com/files/182464/ESET-NOD32-Antivirus-18.0.12.0-Unquoted-Service-Path.html
• https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed
• https://www.exploit-db.com/exploits/51351
• https://www.exploit-db.com/exploits/51964

Get alerted when CVE-2024-0353 or the next vulnerability affects your stack