CVE-2025-4952

Denial-of-service vulnerability in ESET security products for Windows

Published Oct 31, 2025 CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Description
Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Eset
Eset endpoint Antivirus
Eset endpoint Security
Eset file Security
Eset internet Security
Eset mail Security
Eset nod32 Antivirus
Eset safe Server
Eset security
Eset security Ultimate
Eset server Security
Eset small Business Security
Eset smart Security Premium
Microsoft
Microsoft windows
Vendors & Products Eset
Eset endpoint Antivirus
Eset endpoint Security
Eset file Security
Eset internet Security
Eset mail Security
Eset nod32 Antivirus
Eset safe Server
Eset security
Eset security Ultimate
Eset server Security
Eset small Business Security
Eset smart Security Premium
Microsoft
Microsoft windows
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.
Title Denial-of-service vulnerability in ESET security products for Windows
Weaknesses CWE-732
References
Metrics cvssV4_0

{'score': 6.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}