CVE-2022-2402: Eset Endpoint Encryption

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.

Affected products

• Eset Endpoint Encryption: before 5.1.2.26 (fixed in 5.1.2.26)
• Eset Full Disk Encryption: before 1.3.2.32 (fixed in 1.3.2.32)

Published 2022-09-06. Last modified 2026-06-17.