CVE-2025-4952CWE-732

Denial-of-service vulnerability in ESET security products for Windows

Medium · published October 31, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00135 · 2.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-10-31T12:28Z
EPSS history
Timeline
  • 31 OCT 12:28Z
    Denial-of-service vulnerability in ESET security products for Windows
    cvelistv5