CVE-2024-0353: Eset Endpoint Antivirus

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.

Affected products

Eset Endpoint Antivirus: before 8.1.2062.0 (fixed in 8.1.2062.0); from 9.0, before 9.1.2071.0 (fixed in 9.1.2071.0); from 10.0, before 10.0.2052.0 (fixed in 10.0.2052.0); from 10.1, before 10.1.2063.0 (fixed in 10.1.2063.0); from 11.0, before 11.0.2032.0 (fixed in 11.0.2032.0)
Eset Endpoint Security: before 8.1.2062.0 (fixed in 8.1.2062.0); from 9.0, before 9.1.2071.0 (fixed in 9.1.2071.0); from 10.0, before 10.0.2052.0 (fixed in 10.0.2052.0); from 10.1, before 10.1.2063.0 (fixed in 10.1.2063.0); from 11.0, before 11.0.2032.0 (fixed in 11.0.2032.0)
Eset File Security: any version
Eset Internet Security: before 17.0.10.0 (fixed in 17.0.10.0)
Eset Mail Security: before 7.3.10018.0 (fixed in 7.3.10018.0); before 7.3.14006.0 (fixed in 7.3.14006.0); from 8.0, before 8.0.10024.0 (fixed in 8.0.10024.0); from 8.0, before 8.0.14014.0 (fixed in 8.0.14014.0); from 9.0, before 9.0.10012.0 (fixed in 9.0.10012.0); from 9.0, before 9.0.14008.0 (fixed in 9.0.14008.0); …
Eset NOD32 Antivirus: before 17.0.10.0 (fixed in 17.0.10.0)
Eset Security: before 7.3.15006.0 (fixed in 7.3.15006.0); before 17.0.10.0 (fixed in 17.0.10.0); from 8.0, before 8.0.15012.0 (fixed in 8.0.15012.0); from 9.0, before 9.0.15006.0 (fixed in 9.0.15006.0); from 10.0, before 10.0.15005.0 (fixed in 10.0.15005.0)
Eset Server Security: before 7.3.12013.0 (fixed in 7.3.12013.0); from 8.0, before 8.0.12016.0 (fixed in 8.0.12016.0); from 9.0, before 9.0.12019.0 (fixed in 9.0.12019.0); from 10.0, before 10.0.12015.0 (fixed in 10.0.12015.0)
Eset Smart Security: before 17.0.10.0 (fixed in 17.0.10.0)

Published 2024-02-15. Last modified 2026-06-17.