CVE-2021-3576

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-250 CWE-269

Affected software

Vendor	Product	Versions
Bitdefender	Endpoint Security Tools	>= unspecified, < 7.2.1.65
Bitdefender	Total Security	>= unspecified, < 25.0.26

References

https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-seimpersonateprivilege-in-bitdefender-endpoint-security-tools-va-9848/Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1276/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1376/Third Party Advisory, VDB Entry
https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-seimpersonateprivilege-in-bitdefender-endpoint-security-tools-va-9848/Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1276/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1376/Third Party Advisory, VDB Entry

Timeline

Published: Oct 28, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-35778.8An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an att CVE-2021-35787.8A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an ar CVE-2021-35797.8Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint S CVE-2021-35807.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provi CVE-2021-35818.8Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805).CVE-2021-35826.5A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" co CVE-2021-35837.1A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the t CVE-2021-35847.2A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration op CVE-2021-35855.5A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-CVE-2021-35869.8A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be acces CVE-2021-35883.3The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index i CVE-2021-35898.0An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can ac