CVE-2026-75882: Improper access control vulnerability in ESET Encryption products for Windows
Published Oct 30, 2026
·Updated
An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests.
Event History
Oct 30, 2026
CVE Published
via MITRE·12:40 PM
Data Sourced
via MITRE·12:40 PM
DescriptionWeakness
Data Sourced
via NVD·01:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this vulnerability?
Systems running ESET Endpoint Encryption or ESET Full Disk Encryption on Windows are exposed if a standard user can access the affected device interface.
2
What level of access does an attacker need?
An attacker needs standard user permissions on the affected Windows device. The vulnerability does not require user interaction.
3
What can an attacker do after exploiting the issue?
A standard user can send specially crafted requests to a device interface belonging to a privileged kernel driver. The provided data does not specify the resulting actions or impact beyond that access.