CVE-2025-2425

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.

Score

CVSS 4.0 5.1 Medium

Status

Deferred - security@eset.com

Published

2025-07-18

Last modified

2025-07-18

Weaknesses

CWE-367

Affected products

• Eset Endpoint Antivirus For Windows (Eset Spol. S.r.o)
• Eset Endpoint Security For Windows (Eset Spol. S.r.o)
• Eset Internet Security (Eset Spol. S.r.o)
• Eset Mail Security For Microsoft Exchange Server (Eset Spol. S.r.o)
• Eset Nod32 Antivirus (Eset Spol. S.r.o)
• Eset Safe Server (Eset Spol. S.r.o)
• Eset Security For Microsoft Sharepoint Server (Eset Spol. S.r.o)
• Eset Security Ultimate (Eset Spol. S.r.o)
• Eset Server Security For Windows Server (Eset Spol. S.r.o)
• Eset Small Business Security (Eset Spol. S.r.o)
• Eset Smart Security Premium (Eset Spol. S.r.o)

References

• https://support.eset.com/en/ca8840-eset-customer-advisory-toctou-race-condition-vulnerability-in-eset-products-on-windo…