CVE-2024-2003: Eset Internet Security

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.

Affected products

• Eset Internet Security: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Endpoint Antivirus For Windows: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Endpoint Security For Windows: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset File Security For Microsoft Azure: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Internet Security: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Mail Security For IBM Domino: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Mail Security For Microsoft Exchange Server: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset NOD32 Antivirus: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Safe Server: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Security For Microsoft SharePoint Server: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Security Ultimate: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Server Security For Windows Server: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Small Business Security: before 1610 (fixed in 1610)
• Eset, Spol. S R.o Eset Smart Security Premium: before 1610 (fixed in 1610)

Published 2024-06-21. Last modified 2026-06-17.