CVE-2024-3779
Denial of Service in ESET products for Windows
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Denial of Service in ESET products for Windows
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.
- Record
CVE-2024-3779- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-276
- Updated
- 2026-11-02
EUVDEUVD-2024-32351
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.
- Record
EUVD-2024-32351- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4fch-r62j-4r94
Denial of service vulnerability present shortly after product installation or upgrade,...
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.
- Record
GHSA-4fch-r62j-4r94- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-276
- Updated
- 2026-11-02
NVD
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.
- Record
CVE-2024-3779- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-276
- Updated
- 2026-11-02
Affected products
- eset security
- eset endpoint antivirus
- eset endpoint security
- eset internet security
- eset mail security
- eset nod32
- eset server security
- eset smart security
- eset s.r.o endpoint antivirus for windows
- eset s.r.o endpoint security for windows
- eset s.r.o internet security
- eset s.r.o mail security for ibm domino
Show 16 moreShow less
- eset s.r.o mail security for microsoft exchange server
- eset s.r.o nod32 antivirus
- eset s.r.o security for microsoft sharepoint server
- eset s.r.o security ultimate
- eset s.r.o server security for windows server
- eset s.r.o smart security premium
- eset, spol. s r.o. eset endpoint antivirus for windows
- eset, spol. s r.o. eset endpoint security for windows
- eset, spol. s r.o. eset internet security
- eset, spol. s r.o. eset mail security for ibm domino
- eset, spol. s r.o. eset mail security for microsoft exchange server
- eset, spol. s r.o. eset nod32 antivirus
- eset, spol. s r.o. eset security for microsoft sharepoint server
- eset, spol. s r.o. eset security ultimate
- eset, spol. s r.o. eset server security for windows server
- eset, spol. s r.o. eset smart security premium
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-3779 is a medium vulnerability (CVSS 6.1) in Eset Security, published July 16, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. No source names a fixed version.