Read the docs
TI-2021-15659 Aliases CVE-2021-37852GHSA-gj8g-jfxx-vxc7

LPE in ESET products for Windows

Priority LOW 35CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Why it matters now

EPSS 0.00599 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ESET, spol. s r.o.ESET NOD32 Antivirus10.0.337.1 – 15.0.18.0—No fix listedCNA
ESET, spol. s r.o.ESET Internet Security10.0.337.1 – 15.0.18.0—No fix listedCNA
ESET, spol. s r.o.ESET Smart Security10.0.337.1 – 15.0.18.0—No fix listedCNA
ESET, spol. s r.o.ESET Endpoint Antivirus for Windows6.6.2046.0 – 9.0.2032.4—No fix listedCNA
ESET, spol. s r.o.ESET Endpoint Security for Windows6.6.2046.0 – 9.0.2032.4—No fix listedCNA
ESET, spol. s r.o.ESET Server Security for Microsoft Windows Server8.0.12003.0 – 8.0.12003.1—No fix listedCNA
ESET, spol. s r.o.ESET File Security for Microsoft Windows Server7.0.12014.0 – 7.3.12006.0—No fix listedCNA
ESET, spol. s r.o.ESET Server Security for Microsoft Azure7.0.12016.1002 – 7.2.12004.1000—No fix listedCNA
ESET, spol. s r.o.ESET Security for Microsoft SharePoint Server7.0.15008.0 – 8.0.15004.0—No fix listedCNA
ESET, spol. s r.o.ESET Mail Security for IBM Domino7.0.14008.0 – 8.0.14004.0—No fix listedCNA
ESET, spol. s r.o.ESET Mail Security for Microsoft Exchange Server7.0.10019 – 8.0.10016.0—No fix listedCNA
  • ESET NOD32 Antivirus VendorESET, spol. s r.o. Affected 10.0.337.1 – 15.0.18.0 Fixed in — No fix listed CNA
  • ESET Internet Security VendorESET, spol. s r.o. Affected 10.0.337.1 – 15.0.18.0 Fixed in — No fix listed CNA
  • ESET Smart Security VendorESET, spol. s r.o. Affected 10.0.337.1 – 15.0.18.0 Fixed in — No fix listed CNA
  • ESET Endpoint Antivirus for Windows VendorESET, spol. s r.o. Affected 6.6.2046.0 – 9.0.2032.4 Fixed in — No fix listed CNA
  • ESET Endpoint Security for Windows VendorESET, spol. s r.o. Affected 6.6.2046.0 – 9.0.2032.4 Fixed in — No fix listed CNA
  • ESET Server Security for Microsoft Windows Server VendorESET, spol. s r.o. Affected 8.0.12003.0 – 8.0.12003.1 Fixed in — No fix listed CNA
  • ESET File Security for Microsoft Windows Server VendorESET, spol. s r.o. Affected 7.0.12014.0 – 7.3.12006.0 Fixed in — No fix listed CNA
  • ESET Server Security for Microsoft Azure VendorESET, spol. s r.o. Affected 7.0.12016.1002 – 7.2.12004.1000 Fixed in — No fix listed CNA
  • ESET Security for Microsoft SharePoint Server VendorESET, spol. s r.o. Affected 7.0.15008.0 – 8.0.15004.0 Fixed in — No fix listed CNA
  • ESET Mail Security for IBM Domino VendorESET, spol. s r.o. Affected 7.0.14008.0 – 8.0.14004.0 Fixed in — No fix listed CNA
  • ESET Mail Security for Microsoft Exchange Server VendorESET, spol. s r.o. Affected 7.0.10019 – 8.0.10016.0 Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:*6.6.2046.0 to before 7.3.2055.0; 8.0 to before 8.0.2028.3; 8.1 to before 8.1.2031.4; 9.0 to before 9.0.2032.6VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:*6.6.2046.0 to before 7.3.2055.0; 8.0 to before 8.0.2028.3; 8.1 to before 8.1.2031.4; 9.0 to before 9.0.2032.6VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:*7.0.12014.0 – 7.3.12006.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:*10.0.337.1 to before 15.0.18.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:*7.0.10019 to before 7.3.10014.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:*7.0.14008.0 to before 7.3.14003.0; 8.0 to before 8.0.14006.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:*8.0.10012.0 to before 8.0.10018.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:*10.0.337.1 – 15.0.18.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint:*:*7.0.15008.0 – 8.0.15004.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:server_security:*:*:*:*:azure:*:*:*7.0.12016.1002 – 7.2.12004.1000VulnerableESET, spol. s r.o.
  • cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* Versions 6.6.2046.0 to before 7.3.2055.0; 8.0 to before 8.0.2028.3; 8.1 to before 8.1.2031.4; 9.0 to before 9.0.2032.6 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* Versions 6.6.2046.0 to before 7.3.2055.0; 8.0 to before 8.0.2028.3; 8.1 to before 8.1.2031.4; 9.0 to before 9.0.2032.6 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:* Versions 7.0.12014.0 – 7.3.12006.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:* Versions 10.0.337.1 to before 15.0.18.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:* Versions 7.0.10019 to before 7.3.10014.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:* Versions 7.0.14008.0 to before 7.3.14003.0; 8.0 to before 8.0.14006.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:* Versions 8.0.10012.0 to before 8.0.10018.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:* Versions 10.0.337.1 – 15.0.18.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint:*:* Versions 7.0.15008.0 – 8.0.15004.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:server_security:*:*:*:*:azure:*:*:* Versions 7.0.12016.1002 – 7.2.12004.1000 Vulnerable ·ESET, spol. s r.o.
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:eset:server_security:8.0.12003.0:*:*:*:*:windows_server:*:*8.0.12003.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:server_security:8.0.12003.1:*:*:*:*:windows_server:*:*8.0.12003.1VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:smart_security:*:*:*:*:-:windows:*:*10.0.337.1 – 15.0.18.0VulnerableESET, spol. s r.o.
cpe:2.3:a:eset:smart_security:*:*:*:*:premium:windows:*:*10.0.337.1 – 15.0.18.0VulnerableESET, spol. s r.o.
  • cpe:2.3:a:eset:server_security:8.0.12003.0:*:*:*:*:windows_server:*:* Versions 8.0.12003.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:server_security:8.0.12003.1:*:*:*:*:windows_server:*:* Versions 8.0.12003.1 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:smart_security:*:*:*:*:-:windows:*:* Versions 10.0.337.1 – 15.0.18.0 Vulnerable ·ESET, spol. s r.o.
  • cpe:2.3:a:eset:smart_security:*:*:*:*:premium:windows:*:* Versions 10.0.337.1 – 15.0.18.0 Vulnerable ·ESET, spol. s r.o.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-37852
  2. 2026-10-03 Alias added: GHSA-gj8g-jfxx-vxc7

References

Advisory 2

  • TI-2024-00320 Local privilege escalation in Windows products CVSS 3.1HIGH 7.8
  • TI-2023-05150 Improper following of a certificate's chain of trust in ESET security products CVSS 3.1HIGH 8.6
  • TI-2023-02960 Local privilege escalation in security products for Windows CVSS 3.1HIGH 7.8
  • TI-2023-02668 Local privilege escalation in ESET products for Linux and MacOS CVSS 3.1HIGH 7.8
  • TI-2022-00532 Use-after-free vulnerability in ESET products for Linux CVSS 3.1HIGH 7.5
  • TI-2020-09185 ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited… CVSS 3.1HIGH 7.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences