CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

• CWE-280
• CWE-755

• https://support.eset.com/en/ca8268Vendor Advisory
• https://support.eset.com/en/ca8268Vendor Advisory

Published

May 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27161Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8
• CVE-2022-27162CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8
• CVE-2022-27163CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8
• CVE-2022-27164CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8
• CVE-2022-27165CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8
• CVE-2022-27166A carefully crafted request on XHRHtml2Markup.jsp could trig…6.1
• CVE-2022-27168Cross-site scripting vulnerability in LiteCart versions prio…6.1
• CVE-2022-27169An information disclosure vulnerability exists in the OAS En…7.5
• CVE-2022-2717The JoomSport – for Sports: Team & League, Football, Hockey …4.9
• CVE-2022-27170Protection mechanism failure in the Intel(R) Media SDK softw…7.8
• CVE-2022-27172A hard-coded password vulnerability exists in the console in…8.8
• CVE-2022-27173Rejected reason: This CVE ID has been rejected or withdrawn …