CVE-2024-0353
Local privilege escalation in Windows products
HIGH
7.8
CVSS Score
Published: February 15, 2024 at 07:40 AM UTC
Updated: June 17, 2026 at 06:53 AM UTC
21 products affected across 2 vendorsNOD32 AntivirusSmart SecurityEndpoint Antivirus
Using ESET NOD32 Antivirus by ESET, spol. s r.o.?
Get instant alerts when new vulnerabilities affect ESET NOD32 Antivirus - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.6%
SSVC
No known exploit
Description
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 10.1.2058.0v < 8.1.2062.010.0 ≤ v < 10.0.2052.010.1 ≤ v < 10.1.2063.011.0 ≤ v < 11.0.2032.09.0 ≤ v < 9.1.2071.0
Affected range stops below 10.0.2052.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.2063.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 11.0.2032.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.1.2062.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.2071.0, so it looks safe — our inference, not a vendor statement
v ≤ 10.1.2058.0v < 8.1.2062.010.0 ≤ v < 10.0.2052.010.1 ≤ v < 10.1.2063.011.0 ≤ v < 11.0.2032.09.0 ≤ v < 9.1.2071.0
Affected range stops below 10.0.2052.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.2063.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 11.0.2032.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.1.2062.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.2071.0, so it looks safe — our inference, not a vendor statement
All versions
v ≤ 16.2.15.0v < 17.0.10.0
Affected range stops below 17.0.10.0, so it looks safe — our inference, not a vendor statement
v ≤ 10.0.14006.0v ≤ 10.1.10010.0v < 7.3.10018.0v < 7.3.14006.010.0 ≤ v < 10.0.10018.010.0 ≤ v < 10.0.14007.010.1 ≤ v < 10.1.10014.08.0 ≤ v < 8.0.10024.08.0 ≤ v < 8.0.14014.09.0 ≤ v < 9.0.10012.09.0 ≤ v < 9.0.14008.0
Affected range stops below 10.0.10018.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 10.0.14007.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.10014.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 7.3.10018.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 7.3.14006.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.0.10024.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.0.14014.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.0.10012.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.0.14008.0, so it looks safe — our inference, not a vendor statement
v ≤ 16.2.15.0v < 17.0.10.0
Affected range stops below 17.0.10.0, so it looks safe — our inference, not a vendor statement
v ≤ 10.0.15004.0v ≤ 16.2.15.0v < 17.0.10.0v < 7.3.15006.010.0 ≤ v < 10.0.15005.08.0 ≤ v < 8.0.15012.09.0 ≤ v < 9.0.15006.0
Affected range stops below 10.0.15005.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 17.0.10.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 7.3.15006.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.0.15012.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.0.15006.0, so it looks safe — our inference, not a vendor statement
v ≤ 10.0.12014.0v < 7.3.12013.010.0 ≤ v < 10.0.12015.08.0 ≤ v < 8.0.12016.09.0 ≤ v < 9.0.12019.0
Affected range stops below 10.0.12015.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 7.3.12013.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.0.12016.0, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.0.12019.0, so it looks safe — our inference, not a vendor statement
v ≤ 16.2.15.0v < 17.0.10.0
Affected range stops below 17.0.10.0, so it looks safe — our inference, not a vendor statement
v ≤ 16.2.15.0
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
https://packetstormsecurity.com/files/179495/ESET-NOD32-Antivirus-17.2.7.0-Unquoted-Service-Path.htmlBroken Link
Source: af854a3a-2127-422b-91ae-364da2661108
https://packetstormsecurity.com/files/182464/ESET-NOD32-Antivirus-18.0.12.0-Unquoted-Service-Path.htmlSource: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/51351Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/51964SSVC — Action Prioritization
SSVCNo known exploitNot automatableTotal impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
7.8HIGHESET
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-269NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card