CVE-2024-11859: DLL Search Order Hijacking in ESET products for Windows
ESET, spol. s r.o. · ESET NOD32 Antivirus
Affected: ESET, spol. s r.o. ESET NOD32 Antivirus · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 81% of scored CVEs
DescriptionCVE.org
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
Affected products11
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- ESET, spol. s r.o. · ESET NOD32 Antivirusup to and including 18.0.12.0
- ESET, spol. s r.o. · ESET Internet Securityup to and including 18.0.12.0
- ESET, spol. s r.o. · ESET Smart Security Premiumup to and including 18.0.12.0
- ESET, spol. s r.o. · ESET Security Ultimateup to and including 18.0.12.0
- ESET, spol. s r.o. · ESET Endpoint Antivirus for Windowsup to and including 12.0.2038.0; up to and including 11.1.2053.2
- ESET, spol. s r.o. · ESET Endpoint Security for Windowsup to and including 12.0.2038.0; up to and including 11.1.2053.2
- ESET, spol. s r.o. · ESET Small Business Securityup to and including 18.0.12.0
- ESET, spol. s r.o. · ESET Safe Serverup to and including 18.0.12.0
- ESET, spol. s r.o. · ESET Server Security for Windows Serverup to and including 11.1.12005.2
- ESET, spol. s r.o. · ESET Mail Security for Microsoft Exchange Serverup to and including 11.1.10008.0; up to and including 11.0.10008.0; up to and including 10.1.10014.0
- ESET, spol. s r.o. · ESET Security for Microsoft SharePoint Serverup to and including 11.1.15001.0; up to and including 11.0.15004.0; up to and including 10.0.15005.1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- ESET, spol. s r.o.
- Published
- April 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2024-11859 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.