Vulnerability · Published Oct 31, 2025 · Assigned by ESET
CVE-2025-4952Denial-of-service vulnerability in ESET security products for Windows
Medium 6.8
In plain English
A medium-severity incorrect permission assignment in ESET Endpoint Antivirus from ESET. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 4.0)6.8Medium
Exploit odds (30 days)0.1%top 97.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET | ESET NOD32 Antivirus | see references |
| ESET | ESET Internet Security | see references |
| ESET | ESET Smart Security Premium | see references |
| ESET | ESET Security Ultimate | see references |
| ESET | ESET Small Business Security | see references |
| ESET | ESET Safe Server | see references |
| ESET | ESET Endpoint Antivirus | see references |
| ESET | ESET Endpoint Security for Windows | see references |
| ESET | ESET Server Security for Windows Server | see references |
| ESET | ESET Mail Security for Microsoft Exchange Server | see references |
| ESET | ESET Mail Security for IBM Domino | see references |
| ESET | ESET Security for Microsoft SharePoint Server | see references |
| ESET | ESET File Security for Microsoft Azure | see references |
Weakness: CWE-732 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N