Medium severity · published Jul 11, 2025
CVE-2025-5028
Arbitrary file deletion vulnerability in ESET product installers
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
Installation file of ESET security products on Windows
allow an attacker to misuse to delete an arbitrary file without having the permissions to do so.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EE
ESET Endpoint Antivirus for Windows · ESET, spol. s.r.o
through 12.0.2049.0; through 11.1.2059.0 · source: vendor
EE
ESET Endpoint Security for Windows · ESET, spol. s.r.o
through 12.0.2049.0; through 11.1.2059.0 · source: vendor
EI
ESET Internet Security · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
EN
ESET NOD32 Antivirus · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Safe Server · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Security Ultimate · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Small Business Security · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
ES
ESET Smart Security Premium · ESET, spol. s.r.o
through 18.1.13.0 · source: vendor
Affected product
EE
ESET Endpoint Antivirus for Windows
ESET, spol. s.r.o
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5028
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5028
support.eset.com
https://support.eset.com/en/ca8838-arbitrary-file-deletion-vulnerability-in-eset-product-installers-on-windows-fixed
More from ESET Endpoint Antivirus for Windows
8.4
CVE-2024-11859
DLL Search Order Hijacking in ESET products for Windows
7.8
CVE-2024-0353
Local privilege escalation in Windows products
7.3
CVE-2024-2003
Local Privilege Escalation in Quarantine of ESET products for Windows
5.1
CVE-2025-2425
TOCTOU race condition vulnerability in ESET products on Windows