Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-37852

LPE in ESET products for Windows

Description

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ESET ESET NOD32 Antivirus

  • 10.0.337.1 to ≤ 15.0.18.0affected

ESET ESET Internet Security

  • 10.0.337.1 to ≤ 15.0.18.0affected

ESET ESET Smart Security

  • 10.0.337.1 to ≤ 15.0.18.0affected

ESET ESET Endpoint Antivirus for Windows

  • 6.6.2046.0 to ≤ 9.0.2032.4affected

ESET ESET Endpoint Security for Windows

  • 6.6.2046.0 to ≤ 9.0.2032.4affected

ESET ESET Server Security for Microsoft Windows Server

  • 8.0.12003.0 to ≤ 8.0.12003.1affected

ESET ESET File Security for Microsoft Windows Server

  • 7.0.12014.0 to ≤ 7.3.12006.0affected

ESET ESET Server Security for Microsoft Azure

  • 7.0.12016.1002 to ≤ 7.2.12004.1000affected

ESET ESET Security for Microsoft SharePoint Server

  • 7.0.15008.0 to ≤ 8.0.15004.0affected

ESET ESET Mail Security for IBM Domino

  • 7.0.14008.0 to ≤ 8.0.14004.0affected

ESET ESET Mail Security for Microsoft Exchange Server

  • 7.0.10019 to ≤ 8.0.10016.0affected

References