CVE-2024-2003CWE-269

Local Privilege Escalation in Quarantine of ESET products for Windows

High · published June 21, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00308 · 22.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-06-21T07:20Z
EPSS history
Timeline
  • 21 JUN 07:20Z
    Local Privilege Escalation in Quarantine of ESET products for Windows
    cvelistv5