CVE-2022-27167

Severity
7.1HIGH
EPSS
0.0%
top 90.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 10
Latest updateMay 11

Description

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

🔴Vulnerability Details

2
GHSA
GHSA-ffxj-qgwf-8rrm: Privilege escalation vulnerability in Windows products of ESET, spol2022-05-11
CVEList
Arbitrary File Deletion in ESET products for Windows2022-05-10
CVE-2022-27167 (HIGH CVSS 7.1) | Privilege escalation vulnerability | cvebase.io