Skip to main content

ESET Server Security EUVDEUVD-2026-44903

| CVE-2026-6424 MEDIUM
Use After Free (CWE-416)
2026-07-16 ESET GHSA-g4c4-fjm7-hv64
6.7
CVSS 4.0 · Vendor: ESET
Share

Severity by source

Vendor (ESET) PRIMARY
6.7 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.0 MEDIUM

Local vector and high privileges required; scope change to C because UAF in ESET kernel module crashes the OS kernel, crossing privilege boundary from application to kernel.

3.1 AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ESET).

CVSS VectorVendor: ESET

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 16, 2026 - 09:09 vuln.today
CVE Published
Jul 16, 2026 - 08:28 cve.org
MEDIUM 6.7

DescriptionCVE.org

Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system

AnalysisAI

Use-after-free in ESET's Linux security product kernel components enables a local high-privileged attacker to trigger a kernel panic, causing a complete system crash and denial of service. Both ESET Endpoint Antivirus for Linux and ESET Server Security for Linux are affected across unspecified versions, per ESET's own customer advisory. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Gain local high-privilege access
Delivery
Trigger UAF code path in ESET kernel module
Exploit
Kernel dereferences freed memory
Execution
Kernel panic crashes system
Impact
Service availability lost pending reboot

Vulnerability AssessmentAI

Exploitation Exploitation requires local access to the target system and high-privilege credentials or an already-elevated process (PR:H, AV:L per CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.7 (Medium) accurately reflects the constrained exploitation conditions. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario A local administrator or privileged process on a Linux host running ESET Endpoint Antivirus or ESET Server Security triggers a specific code path in the ESET kernel module that dereferences a previously freed memory region, causing an unrecoverable kernel panic and system crash. No public proof-of-concept code has been identified, so exploitation currently requires knowledge of the internal ESET kernel module code paths. …
Remediation The primary remediation is to apply the patch detailed in the ESET customer advisory at https://support.eset.com/en/ca8972-eset-customer-advisory-use-after-free-vulnerability-in-eset-security-products-for-linux-fixed. … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Eset

View all
CVE-2015-8841 CRITICAL POC
9.8 Apr 12

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to ex

CVE-2024-0353 HIGH POC
7.8 Feb 15

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete file

CVE-2014-4973 MEDIUM POC
6.9 Sep 23

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in

CVE-2016-9892 MEDIUM POC
5.9 Mar 02

The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.

CVE-2020-10180 CRITICAL
9.8 Mar 05

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. Rated critical

CVE-2026-6423 HIGH
8.5 Jul 16

Local privilege escalation in ESET Inspect Connector for Windows lets a low-privileged local user escalate to elevated (

CVE-2024-7400 HIGH
8.5 Sep 27

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file

CVE-2023-3160 HIGH
7.8 Aug 14

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or

CVE-2023-2847 HIGH
7.8 Jun 15

During internal security analysis, a local privilege escalation vulnerability has been identified. Rated high severity (

CVE-2020-11446 HIGH
7.8 Apr 29

ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard l

CVE-2019-16519 HIGH
7.8 Oct 14

ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an u

CVE-2018-0649 HIGH
7.8 Sep 07

Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. Rated high severity (CVSS 7.8)

Share

EUVD-2026-44903 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy