CVE-2021-37852
LPE in ESET products for Windows
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
LPE in ESET products for Windows
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
- Record
CVE-2021-37852- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-24331
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
- Record
EUVD-2021-24331- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gj8g-jfxx-vxc7 No score
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can...
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
- Record
GHSA-gj8g-jfxx-vxc7- Weakness
- CWE-863
- Updated
- 2026-11-02
NVD
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
- Record
CVE-2021-37852- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
- eset endpoint antivirus
- eset endpoint security
- eset endpoint antivirus for windows
- eset endpoint security for windows
- eset file security for microsoft windows server
- eset internet security
- eset mail security for ibm domino
- eset mail security for microsoft exchange server
- eset nod32 antivirus
- eset security for microsoft sharepoint server
- eset server security for microsoft azure
- eset server security for microsoft windows server
Show 14 moreShow less
- eset smart security
- eset file security
- eset mail security
- eset security
- eset server security
- eset, spol. s r.o. eset endpoint antivirus for windows
- eset, spol. s r.o. eset endpoint security for windows
- eset, spol. s r.o. eset file security for microsoft windows server
- eset, spol. s r.o. eset internet security
- eset, spol. s r.o. eset mail security for ibm domino
- eset, spol. s r.o. eset mail security for microsoft exchange server
- eset, spol. s r.o. eset nod32 antivirus
- eset, spol. s r.o. eset security for microsoft sharepoint server
- eset, spol. s r.o. eset server security for microsoft windows server
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-37852 is a high vulnerability (CVSS 7.8) in Eset Endpoint Antivirus, published February 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 48th percentile. No source names a fixed version.