CVE-2021-37850

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published
Nov 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-378517.8Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer CVE-2021-378527.8ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate priviCVE-2021-378596.1Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.CVE-2021-37865.5A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be usedCVE-2021-378606.1Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary webCVE-2021-378617.5Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.CVE-2021-378625.4Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into CVE-2021-378635.7Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a cCVE-2021-378646.5Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to vCVE-2021-378655.7Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which alCVE-2021-378667.5Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allowsCVE-2021-378674.3Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenti
CVE-2021-37850: Medium severity, CVSS 5.5 | Vulnix