Live › vulnerability › CVE-2026-75882
ESET Endpoint Encryption and ESET Full Disk Encryption let a local user with standard permissions reach a device interface of a privileged kernel driver. A crafted request sent through that interface can let the attacker act with kernel-level privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 13:30 UTC. All times on this page are UTC.
Windows machines with ESET Endpoint Encryption (5.4.23.0 and earlier) or ESET Full Disk Encryption (2.4.4.0 and earlier) installed. A local user with standard permissions can send crafted requests to a privileged kernel driver's device interface, and the driver runs them as SYSTEM. This can disclose disk metadata, coerce authentication to remote systems, or cause loss of access to the encrypted volume. Machines without these products are not affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ESET Endpoint Encryption for Windows | vendor | <= 5.4.23.0 | 5.4.29.0 |
| ESET Full Disk Encryption for Windows | vendor | <= 2.4.4.0 | 2.4.8.0 |
5.4.23.0 and earlier, Full Disk Encryption 2.4.4.0 and earlier5.4.29.0 and 2.4.8.05.4.29.0 or later, and ESET Full Disk Encryption for Windows to 2.4.8.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests.
This page as .md · .json · in your agent: get_signal("CVE-2026-75882")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.