---
id: CVE-2026-75882
title: Improper access control vulnerability in ESET Encryption products for Windows
summary: "An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow\_attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted…"
severity: high
cvss: 8.5
cvssVector: 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-284
vendor: ESET spol. s.r.o.
product: ESET Endpoint Encryption
affected:
  - eset_endpoint_encryption <= 5.4.23.0
  - eset_full_disk_encryption <= 2.4.4.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-30T15:22:37.244525Z'
published: '2026-10-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T15:22:56.675Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-75882'
references:
  - url: >-
      https://support.eset.com/en/ca9033-eset-customer-advisory-improper-access-control-vulnerability-in-eset-encryption-products-for-windows-fixed
tags:
  - cve.org
epss: 0.00097
epssPercentile: 0.00716
ingestedAt: '2026-11-05T16:07:30.411Z'
---

## Overview

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests.

## Affected

- `eset_endpoint_encryption <= 5.4.23.0`
- `eset_full_disk_encryption <= 2.4.4.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.