CVE-2025-5028CWE-269

Arbitrary file deletion vulnerability in ESET product installers

Medium · published July 11, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Installation file of ESET security products on Windows

allow an attacker to misuse to delete an arbitrary file without having the permissions to do so.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-07-11T06:40Z
EPSS history
Timeline
  • 11 JUL 06:40Z
    Arbitrary file deletion vulnerability in ESET product installers
    cvelistv5