Medium severity · published Jul 18, 2025
CVE-2025-2425
TOCTOU race condition vulnerability in ESET products on Windows
5.1
CVSS
0.1%
EPSS
No
On KEV
Description
Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EE
ESET Endpoint Antivirus for Windows · ESET, spol. s.r.o
through 12.0.2049.0; through 11.1.2059.0 · source: vendor
EE
ESET Endpoint Security for Windows · ESET, spol. s.r.o
through 12.0.2049.0; through 11.1.2059.0 · source: vendor
EI
ESET Internet Security · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
EM
ESET Mail Security for Microsoft Exchange Server · ESET, spol. s.r.o
through 12.0.10003.0; through 11.1.10011.0 · source: vendor
EN
ESET NOD32 Antivirus · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Safe Server · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Security Ultimate · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Security for Microsoft SharePoint Server · ESET, spol. s.r.o
through 12.0.15004.0; through 11.1.15003.0 · source: vendor
ES
ESET Server Security for Windows Server · ESET, spol. s.r.o
through 12.0.12004.0; through 11.1.12009.1 · source: vendor
ES
ESET Small Business Security · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Smart Security Premium · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
Affected product
EE
ESET Endpoint Antivirus for Windows
ESET, spol. s.r.o
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-2425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-2425
support.eset.com
https://support.eset.com/en/ca8840-eset-customer-advisory-toctou-race-condition-vulnerability-in-eset-products-on-windows-fixed
More from ESET Endpoint Antivirus for Windows
8.4
CVE-2024-11859
DLL Search Order Hijacking in ESET products for Windows
7.8
CVE-2024-0353
Local privilege escalation in Windows products
7.3
CVE-2024-2003
Local Privilege Escalation in Quarantine of ESET products for Windows
6.8
CVE-2025-5028
Arbitrary file deletion vulnerability in ESET product installers