CVE-2024-11859

—1

CVSS 4.0

8.4 high

EPSS

2%p80

Published

Apr 7, 2025 (Apr 7, 2025)

Modified

Jun 17, 2026

Description

DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.

Weakness: CWE-427
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news6 stories

⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-29824 CVE-2024-11859 CVE-2025-3102+17 CVEs

60

Flaw in ESET security software used to spread malware from ToddyCat group

The RecordApr 7, 15:36 UTC · Apr 7, 2025Malware in the wildCVE-2024-11859

60

ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens

The Hacker NewsNov 25, 16:23 UTC · Nov 25, 2025Vulnerability CVE-2024-118591

47

An APT group exploited ESET flaw to execute malware

Security AffairsApr 10, 10:47 UTC · Apr 10, 2025Malware CVE-2024-11859 CVE-2021-36276

47

APT group ToddyCat exploits a vulnerability in ESET for DLL proxying

Kaspersky SecurelistApr 7, 10:01 UTC · Apr 7, 2025Vulnerability CVE-2024-11859 CVE-2021-36276

47

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner

The Hacker NewsApr 9, 14:05 UTC · Apr 9, 2025Malware CVE-2024-11859 CVE-2021-36276 CVE-2021-21551

35