CVE-2025-2425 | ESET NOD32 Antivirus toctou

A vulnerability, which was classified as problematic, was found in ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Security Ultimate, Endpoint Antivirus for Windows, Endpoint Security for Windows, Small Business Security, Safe Server, Server Security for Windows Server, Mail Security for Microsoft Exchange Server and Security for Microsoft SharePoint Server. This affects an unknown part. The manipulation leads to time-of-check time-of-use.

This vulnerability is uniquely identified as CVE-2025-2425. The attack needs to be approached locally. There is no exploit available.