CVE-2025-4952

Denial-of-service vulnerability in ESET security products for Windows

CVSS 6.8 MEDIUMEPSS 0.1%CWE-732

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

31 Oct 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

ESET · ESET Endpoint Antivirus ESET · ESET Endpoint Security for Windows ESET · ESET File Security for Microsoft Azure ESET · ESET Internet Security ESET · ESET Mail Security for IBM Domino ESET · ESET Mail Security for Microsoft Exchange Server ESET · ESET NOD32 Antivirus ESET · ESET Safe Server ESET · ESET Security for Microsoft SharePoint Server ESET · ESET Security Ultimate ESET · ESET Server Security for Windows Server ESET · ESET Small Business Security ESET · ESET Smart Security Premium

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed