TOCTOU race condition vulnerability in ESET products on Windows

5.1 CVSS

Vulnerability Description

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2425

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://support.eset.com/en/ca8840-eset-customer-advisory-toctou-race-condition-vulnerability-in-eset-products-on-windows-fixed

More from ESET, spol. s.r.o

View All →

CVE-2025-5028

Arbitrary file deletion vulnerability in ESET product installers

Medium 6.8

CVE-2025-3716

User enumeration in ESET Protect (on-prem)

Medium 5.3

CVE-2025-13176

Local privilege escalation in ESET Inspect Connector for Windows

High 8.4

Affected Vendor

ESET, spol. s.r.o

View all reports →

Affected Software

ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Small Business Security, ESET Safe Server, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Security for Microsoft SharePoint Server

Vulnerable Versions: