What’s Vulnerable › Vulnerabilities
CVE-2024-11859: DLL Search Order Hijacking in ESET products for Windows
- Severity: high (CVSS 8.4 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-04-07 · updated 2026-06-17
- Weakness: CWE-427
Description
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
Affected products
- ESET, spol. s r.o. ESET Endpoint Antivirus for Windows: through 12.0.2038.0; through 11.1.2053.2
- ESET, spol. s r.o. ESET Endpoint Security for Windows: through 12.0.2038.0; through 11.1.2053.2
- ESET, spol. s r.o. ESET Internet Security: through 18.0.12.0
- ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server: through 11.1.10008.0; through 11.0.10008.0; through 10.1.10014.0
- ESET, spol. s r.o. ESET NOD32 Antivirus: through 18.0.12.0
- ESET, spol. s r.o. ESET Safe Server: through 18.0.12.0
- ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server: through 11.1.15001.0; through 11.0.15004.0; through 10.0.15005.1
- ESET, spol. s r.o. ESET Security Ultimate: through 18.0.12.0
- ESET, spol. s r.o. ESET Server Security for Windows Server: through 11.1.12005.2
- ESET, spol. s r.o. ESET Small Business Security: through 18.0.12.0
- ESET, spol. s r.o. ESET Smart Security Premium: through 18.0.12.0
References
Get alerted when CVE-2024-11859 or the next vulnerability affects your stack