Back to CVE records
Medium 6.8Published Oct 31, 2025
CVE-2025-4952Denial-of-service vulnerability in ESET security products for Windows
Updated under an hour ago ()
Does this affect you?
It affects ESET NOD32 Antivirus and 12 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.
- CVSS
- 6.8 MEDIUM (v4.0, CNA)CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
- Weakness (CWE)
- CWE-732
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- ESET
- NVD analysis
- Deferred
- Record last updated
- Oct 31, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
ESET ESET NOD32 Antivirus eset:nod32_antivirus (from the name) | 1496 not affected | CNA record |
ESET ESET Internet Security eset:internet_security (from the name) | 1496 not affected | CNA record |
ESET ESET Smart Security Premium eset:smart_security_premium (from the name) | 1496 not affected | CNA record |
ESET ESET Security Ultimate eset:security_ultimate (from the name) | 1496 not affected | CNA record |
ESET ESET Small Business Security eset:small_business_security (from the name) | 1496 not affected | CNA record |
ESET ESET Safe Server eset:safe_server (from the name) | 1496 not affected | CNA record |
ESET ESET Endpoint Antivirus eset:endpoint_antivirus (from the name) | 1496 not affected | CNA record |
ESET ESET Endpoint Security for Windows eset:endpoint_security_for_windows (from the name) | 1496 not affected | CNA record |
ESET ESET Server Security for Windows Server eset:server_security_for_windows_server (from the name) | 1496 not affected | CNA record |
ESET ESET Mail Security for Microsoft Exchange Server eset:mail_security_for_microsoft_exchange_server (from the name) | 1496 not affected | CNA record |
ESET ESET Mail Security for IBM Domino eset:mail_security_for_ibm_domino (from the name) | 1496 not affected | CNA record |
ESET ESET Security for Microsoft SharePoint Server eset:security_for_microsoft_sharepoint_server (from the name) | 1496 not affected | CNA record |
ESET ESET File Security for Microsoft Azure eset:file_security_for_microsoft_azure (from the name) | 1496 not affected | CNA record |
References
- https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.