CVE-2022-27167

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: May 10, 2022
Source updated: Sep 16, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Arbitrary File Deletion in ESET products for Windows

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ESET NOD32 Antivirus

Vendor: ESET, spol. s r.o.
Product: ESET NOD32 Antivirus
Platforms: Unknown
Default status: Unknown

ESET NOD32 Antivirus · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
11.2	`affected`	custom	15.1.12.0	Unavailable	None listed

ESET Internet Security

Vendor: ESET, spol. s r.o.
Product: ESET Internet Security
Platforms: Unknown
Default status: Unknown

ESET Internet Security · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
11.2	`affected`	custom	15.1.12.0	Unavailable	None listed

ESET Smart Security Premium

Vendor: ESET, spol. s r.o.
Product: ESET Smart Security Premium
Platforms: Unknown
Default status: Unknown

ESET Smart Security Premium · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
11.2	`affected`	custom	15.1.12.0	Unavailable	None listed

ESET Endpoint Antivirus

Vendor: ESET, spol. s r.o.
Product: ESET Endpoint Antivirus
Platforms: Unknown
Default status: Unknown

ESET Endpoint Antivirus · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0	`affected`	custom	9.0.2046.0	Unavailable	`8.1.2050.0` → `unaffected` `8.0.2053.0` → `unaffected`

ESET Endpoint Security

Vendor: ESET, spol. s r.o.
Product: ESET Endpoint Security
Platforms: Unknown
Default status: Unknown

ESET Endpoint Security · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0	`affected`	custom	9.0.2046.0	Unavailable	`8.1.2050.0` → `unaffected` `8.0.2053.0` → `unaffected`

ESET Server Security for Microsoft Windows Server

Vendor: ESET, spol. s r.o.
Product: ESET Server Security for Microsoft Windows Server
Platforms: Unknown
Default status: Unknown

ESET Server Security for Microsoft Windows Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
8.0	`affected`	custom	9.0.12012.0	Unavailable	None listed

ESET File Security for Microsoft Windows Server

Vendor: ESET, spol. s r.o.
Product: ESET File Security for Microsoft Windows Server
Platforms: Unknown
Default status: Unknown

ESET File Security for Microsoft Windows Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0 8.0.12013.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

ESET Mail Security for Microsoft Exchange Server

Vendor: ESET, spol. s r.o.
Product: ESET Mail Security for Microsoft Exchange Server
Platforms: Unknown
Default status: Unknown

ESET Mail Security for Microsoft Exchange Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0	`affected`	custom	8.0.10020.0	Unavailable	None listed

ESET Mail Security for IBM Domino

Vendor: ESET, spol. s r.o.
Product: ESET Mail Security for IBM Domino
Platforms: Unknown
Default status: Unknown

ESET Mail Security for IBM Domino · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0	`affected`	custom	8.0.14011.0	Unavailable	None listed

ESET Security for Microsoft SharePoint Server

Vendor: ESET, spol. s r.o.
Product: ESET Security for Microsoft SharePoint Server
Platforms: Unknown
Default status: Unknown

ESET Security for Microsoft SharePoint Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0	`affected`	custom	8.0.15009.0	Unavailable	None listed