Read the docs
TI-2021-15658 Aliases CVE-2021-37851GHSA-vfr8-h6pw-gfpc

Local Privilege Escalation in ESET product for Windows

Priority LOW 33CWE-280Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Why it matters now

EPSS 0.00208 10th percentileScored 2026-11-07
Fix Fixed ESET NOD32 Antivirus (ESET, spol. s r.o.): 15.1.12.0ESET Internet Security (ESET, spol. s r.o.): 15.1.12.0+7 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ESET, spol. s r.o.ESET NOD32 Antivirus11.2 to before 15.1.12.015.1.12.0Patch availableCNA
ESET, spol. s r.o.ESET Internet Security11.2 to before 15.1.12.015.1.12.0Patch availableCNA
ESET, spol. s r.o.ESET Smart Security Premium11.2 to before 15.1.12.015.1.12.0Patch availableCNA
ESET, spol. s r.o.ESET Endpoint Antivirus6.0 to before 9.0.2046.09.0.2046.0Patch availableCNA
ESET, spol. s r.o.ESET Endpoint Security6.0 to before 9.0.2046.09.0.2046.0Patch availableCNA
ESET, spol. s r.o.ESET Server Security for Microsoft Windows Server8.0 to before 9.0.12012.09.0.12012.0Patch availableCNA
ESET, spol. s r.o.ESET File Security for Microsoft Windows Server6.0 8.0.12013.0—No fix listedCNA
ESET, spol. s r.o.ESET Mail Security for Microsoft Exchange Server6.0 to before 8.0.10020.08.0.10020.0Patch availableCNA
ESET, spol. s r.o.ESET Mail Security for IBM Domino6.0 to before 8.0.14011.08.0.14011.0Patch availableCNA
ESET, spol. s r.o.ESET Security for Microsoft SharePoint Server6.0 to before 8.0.15009.08.0.15009.0Patch availableCNA
  • ESET NOD32 Antivirus VendorESET, spol. s r.o. Affected 11.2 to before 15.1.12.0 Fixed in 15.1.12.0 Patch available CNA
  • ESET Internet Security VendorESET, spol. s r.o. Affected 11.2 to before 15.1.12.0 Fixed in 15.1.12.0 Patch available CNA
  • ESET Smart Security Premium VendorESET, spol. s r.o. Affected 11.2 to before 15.1.12.0 Fixed in 15.1.12.0 Patch available CNA
  • ESET Endpoint Antivirus VendorESET, spol. s r.o. Affected 6.0 to before 9.0.2046.0 Fixed in 9.0.2046.0 Patch available CNA
  • ESET Endpoint Security VendorESET, spol. s r.o. Affected 6.0 to before 9.0.2046.0 Fixed in 9.0.2046.0 Patch available CNA
  • ESET Server Security for Microsoft Windows Server VendorESET, spol. s r.o. Affected 8.0 to before 9.0.12012.0 Fixed in 9.0.12012.0 Patch available CNA
  • ESET File Security for Microsoft Windows Server VendorESET, spol. s r.o. Affected 6.0 8.0.12013.0 Fixed in — No fix listed CNA
  • ESET Mail Security for Microsoft Exchange Server VendorESET, spol. s r.o. Affected 6.0 to before 8.0.10020.0 Fixed in 8.0.10020.0 Patch available CNA
  • ESET Mail Security for IBM Domino VendorESET, spol. s r.o. Affected 6.0 to before 8.0.14011.0 Fixed in 8.0.14011.0 Patch available CNA
  • ESET Security for Microsoft SharePoint Server VendorESET, spol. s r.o. Affected 6.0 to before 8.0.15009.0 Fixed in 8.0.15009.0 Patch available CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:*6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:*6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:*6.0 to before 8.0.12013.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:*11.2 to before 15.1.12.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:*6.0 to before 8.0.10020.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:*6.0 to before 8.0.14011.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:*11.2 to before 15.1.12.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint_server:*:*6.0 to before 8.0.15009.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:server_security:*:*:*:*:*:azure:*:*6.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:server_security:*:*:*:*:*:windows_server:*:*8.0 to before 9.0.12012.0VulnerableESET, spol. s r.o.
  • cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* Versions 6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* Versions 6.0 to before 8.0.2053.0; 8.1 to before 8.1.2050.0; 9.0 to before 9.0.2046.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:* Versions 6.0 to before 8.0.12013.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:* Versions 11.2 to before 15.1.12.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:* Versions 6.0 to before 8.0.10020.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:* Versions 6.0 to before 8.0.14011.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:* Versions 11.2 to before 15.1.12.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint_server:*:* Versions 6.0 to before 8.0.15009.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:server_security:*:*:*:*:*:azure:*:* Versions 6.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:server_security:*:*:*:*:*:windows_server:*:* Versions 8.0 to before 9.0.12012.0 Vulnerable ·ESET, spol. s r.o.
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:eset:smart_security:*:*:*:*:premium:windows:*:*11.2 to before 15.1.12.0VulnerableESET, spol. s r.o.
  • cpe:2.3:a:eset:smart_security:*:*:*:*:premium:windows:*:* Versions 11.2 to before 15.1.12.0 Vulnerable ·ESET, spol. s r.o.

Remediation

  • Fix · CNA ESET NOD32 Antivirus (ESET, spol. s r.o.) Fixed in 15.1.12.0
  • Fix · CNA ESET Internet Security (ESET, spol. s r.o.) Fixed in 15.1.12.0
  • Fix · CNA ESET Smart Security Premium (ESET, spol. s r.o.) Fixed in 15.1.12.0
  • Fix · CNA ESET Endpoint Antivirus (ESET, spol. s r.o.) Fixed in 9.0.2046.0
  • Fix · CNA ESET Endpoint Security (ESET, spol. s r.o.) Fixed in 9.0.2046.0
  • Fix · CNA ESET Server Security for Microsoft Windows Server (ESET, spol. s r.o.) Fixed in 9.0.12012.0
  • Fix · CNA ESET Mail Security for Microsoft Exchange Server (ESET, spol. s r.o.) Fixed in 8.0.10020.0
  • Fix · CNA ESET Mail Security for IBM Domino (ESET, spol. s r.o.) Fixed in 8.0.14011.0
  • Fix · CNA ESET Security for Microsoft SharePoint Server (ESET, spol. s r.o.) Fixed in 8.0.15009.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-37851
  2. 2026-10-03 Alias added: GHSA-vfr8-h6pw-gfpc

References

Advisory 1

  • TI-2024-00320 Local privilege escalation in Windows products CVSS 3.1HIGH 7.8
  • TI-2023-05150 Improper following of a certificate's chain of trust in ESET security products CVSS 3.1HIGH 8.6
  • TI-2023-02960 Local privilege escalation in security products for Windows CVSS 3.1HIGH 7.8
  • TI-2023-02668 Local privilege escalation in ESET products for Linux and MacOS CVSS 3.1HIGH 7.8
  • TI-2021-15659 LPE in ESET products for Windows CVSS 3.1HIGH 7.8
  • TI-2022-00532 Use-after-free vulnerability in ESET products for Linux CVSS 3.1HIGH 7.5
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences