High severity7.8NVD Advisory· Published Sep 7, 2018· Updated Jun 17, 2026

CVE-2018-0649

Description

Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Canon IT Solutions Inc./ESET NOD32 Antivirusllm-create
Canon IT Solutions Inc./DESlock+ Prollm-create
Canon IT Solutions Inc./The installers of multiple Canon IT Solutions Inc. software programsv5
Range: (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones))

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN41452671/index.htmlnvdThird Party AdvisoryVDB Entry
eset-support.canon-its.jp/faq/show/10720nvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000