CVE-2022-27167: Eset Endpoint Antivirus

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Affected products

  • Eset Endpoint Antivirus: from 6.0, before 8.0.2053.0 (fixed in 8.0.2053.0); from 8.1, before 8.1.2050.0 (fixed in 8.1.2050.0); from 9.0, before 9.0.2046.0 (fixed in 9.0.2046.0)
  • Eset Endpoint Security: from 6.0, before 8.0.2053.0 (fixed in 8.0.2053.0); from 8.1, before 8.1.2050.0 (fixed in 8.1.2050.0); from 9.0, before 9.0.2046.0 (fixed in 9.0.2046.0)
  • Eset File Security: from 6.0, before 8.0.12013.0 (fixed in 8.0.12013.0)
  • Eset Internet Security: from 11.2, before 15.1.12.0 (fixed in 15.1.12.0)
  • Eset Mail Security: from 6.0, before 8.0.10020.0 (fixed in 8.0.10020.0); from 6.0, before 8.0.14011.0 (fixed in 8.0.14011.0)
  • Eset NOD32 Antivirus: from 11.2, before 15.1.12.0 (fixed in 15.1.12.0)
  • Eset Security: from 6.0, before 8.0.15009.0 (fixed in 8.0.15009.0)
  • Eset Server Security: from 6.0; from 8.0, before 9.0.12012.0 (fixed in 9.0.12012.0)
  • Eset Smart Security: from 11.2, before 15.1.12.0 (fixed in 15.1.12.0)

Published 2022-05-10. Last modified 2026-06-17.