Riskcovery

CVE-2025-4952

Denial-of-service vulnerability in ESET security products for Windows

State
Published
Severity
6.8 Medium
Published
Oct 31, 2025
Updated
Oct 31, 2025
Reserved
May 19, 2025

Read the record on cve.org

Description

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

Scores

CVSSScoreVectorSource
4.06.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:NESET

Weaknesses

  • CWE-732 Incorrect Permission Assignment for Critical Resource

Affected Products

ProductVersions
ESET NOD32 AntivirusESET
  • 1496Not affected
ESET Internet SecurityESET
  • 1496Not affected
ESET Smart Security PremiumESET
  • 1496Not affected
ESET Security UltimateESET
  • 1496Not affected
ESET Small Business SecurityESET
  • 1496Not affected
ESET Safe ServerESET
  • 1496Not affected
ESET Endpoint AntivirusESET
  • 1496Not affected
ESET Endpoint Security for WindowsESET
  • 1496Not affected
ESET Server Security for Windows ServerESET
  • 1496Not affected
ESET Mail Security for Microsoft Exchange ServerESET
  • 1496Not affected
ESET Mail Security for IBM DominoESET
  • 1496Not affected
ESET Security for Microsoft SharePoint ServerESET
  • 1496Not affected
ESET File Security for Microsoft AzureESET
  • 1496Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.