DLL Search Order Hijacking in ESET products for Windows
43Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 8.4epss 2.0%
from disclosure to weapon
Published on NVDApr 7
VulnCheckApr 7
exploitation probability
2.0%top 21% of all CVEs
observed exploitation
yesVulnCheck
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
ESET, spol. s r.o. · ESET Endpoint Antivirus for WindowsESET, spol. s r.o. · ESET Endpoint Security for WindowsESET, spol. s r.o. · ESET Internet SecurityESET, spol. s r.o. · ESET Mail Security for Microsoft Exchange ServerESET, spol. s r.o. · ESET NOD32 AntivirusESET, spol. s r.o. · ESET Safe ServerESET, spol. s r.o. · ESET Security for Microsoft SharePoint ServerESET, spol. s r.o. · ESET Security UltimateESET, spol. s r.o. · ESET Server Security for Windows ServerESET, spol. s r.o. · ESET Small Business SecurityESET, spol. s r.o. · ESET Smart Security Premium