← CVE Intelligence

CVE-2025-2425

TOCTOU race condition vulnerability in ESET products on Windows PUBLISHED

Description (CNA)

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.

Affected (CNA)

Vendor / productVersions
ESET, spol. s.r.o / ESET NOD32 Antivirusaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Internet Securityaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Smart Security Premiumaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Security Ultimateaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Endpoint Antivirus for Windowsaffected 0 through 12.0.2049.0; affected 0 through 11.1.2059.0
ESET, spol. s.r.o / ESET Endpoint Security for Windowsaffected 0 through 12.0.2049.0; affected 0 through 11.1.2059.0
ESET, spol. s.r.o / ESET Small Business Securityaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Safe Serveraffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Server Security for Windows Serveraffected 0 through 12.0.12004.0; affected 0 through 11.1.12009.1
ESET, spol. s.r.o / ESET Mail Security for Microsoft Exchange Serveraffected 0 through 12.0.10003.0; affected 0 through 11.1.10011.0
ESET, spol. s.r.o / ESET Security for Microsoft SharePoint Serveraffected 0 through 12.0.15004.0; affected 0 through 11.1.15003.0

CWE

CWE-367

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.