Read the docs
TI-2021-02525 Aliases CVE-2021-3576GHSA-2p82-m3fp-gp3x

Privilege escalation via SeImpersonatePrivilege

Priority LOW 36CWE-250Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-250.

Summary

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26.

Why it matters now

EPSS 0.00922 60th percentileScored 2026-11-07
Fix Fixed Endpoint Security Tools (Bitdefender): 7.2.1.65Total Security (Bitdefender): 25.0.26

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
BitdefenderEndpoint Security Toolsbefore 7.2.1.657.2.1.65Patch availableCNA
BitdefenderTotal Securitybefore 25.0.2625.0.26Patch availableCNA
  • Endpoint Security Tools VendorBitdefender Affected before 7.2.1.65 Fixed in 7.2.1.65 Patch available CNA
  • Total Security VendorBitdefender Affected before 25.0.26 Fixed in 25.0.26 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:*:*:*before 7.2.1.65VulnerableBitdefender
cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:*before 25.0.26VulnerableBitdefender
  • cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:*:*:* Versions before 7.2.1.65 Vulnerable ·Bitdefender
  • cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:* Versions before 25.0.26 Vulnerable ·Bitdefender

Remediation

  • Fix · CNA Endpoint Security Tools (Bitdefender) Fixed in 7.2.1.65
  • Fix · CNA Total Security (Bitdefender) Fixed in 25.0.26

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-3576
  2. 2026-10-03 Alias added: GHSA-2p82-m3fp-gp3x

References

Advisory 3

  • TI-2021-02507 Improper access control in Bitdefender Endpoint Security Tools for Linux CVSS 3.1CRITICAL 10.0
  • TI-2025-06435 Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security CVSS 4.0HIGH 8.8
  • TI-2021-02505 Insufficient validation on regular expression in EPPUpdateService config file (VA-9825) CVSS 3.1HIGH 7.5
  • TI-2022-00592 Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144) CVSS 3.1HIGH 7.5
  • TI-2021-03065 Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017) CVSS 3.1HIGH 7.8
  • TI-2021-02528 Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe CVSS 3.1HIGH 7.8
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences