Description
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user.
Published: 2026-07-24
Score: 8.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw permits a local attacker to run code with elevated privileges, enabling full system compromise. Listed as CWE-269, privilege escalation, the attacker could gain control over the operating system, access sensitive data, install malware, or tamper with system configurations.

Affected Systems

ESET Cyber Security for macOS and ESET Endpoint Security for macOS from ESET spol. s.r.o. No specific versions are disclosed in the advisory.

Risk and Exploitability

The CVSS score of 8.5 reflects a severe risk. The EPSS indicates an exploitation probability of less than 1%, and the flaw is not present in the CISA KEV list. Exploitation requires local access on the affected macOS system; thus the threat surface is somewhat limited, but the potential impact remains high for compromised machines.

Generated by OpenCVE AI on August 3, 2026 at 20:26 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to the latest ESET security application versions that contain the fix.
  • Apply the vendor's advisory guidance or configuration changes to reduce privilege escalation opportunities.
  • Limit local user accounts to the minimum required privileges and audit any privileged processes.

Generated by OpenCVE AI on August 3, 2026 at 20:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 27 Jul 2026 13:15:00 +0000

Type Values Removed Values Added
First Time appeared Eset
Eset cyber Security
Eset endpoint Security
Vendors & Products Eset
Eset cyber Security
Eset endpoint Security

Fri, 24 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Description Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user.
Title Local privilege escalation in ESET security applications for macOS
Weaknesses CWE-269
References
Metrics cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Eset Cyber Security Endpoint Security
cve-icon MITRE

Status: PUBLISHED

Assigner: ESET

Published:

Updated: 2026-07-24T12:34:28.790Z

Reserved: 2026-06-02T11:52:51.095Z

Link: CVE-2026-10610

cve-icon Vulnrichment

Updated: 2026-07-24T12:34:24.422Z

cve-icon NVD

Status : Deferred

Published: 2026-07-24T12:16:45.797

Modified: 2026-07-30T19:14:09.213

Link: CVE-2026-10610

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T20:30:04Z

Weaknesses
  • CWE-269

    Improper Privilege Management