CVE-2021-37851

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

VendorProductVersions
ESET, spol. s r.o.ESET NOD32 Antivirus>= 11.2, < 15.1.12.0
ESET, spol. s r.o.ESET Internet Security>= 11.2, < 15.1.12.0
ESET, spol. s r.o.ESET Smart Security Premium>= 11.2, < 15.1.12.0
ESET, spol. s r.o.ESET Endpoint Antivirus>= 6.0, < 9.0.2046.0
ESET, spol. s r.o.ESET Endpoint Security>= 6.0, < 9.0.2046.0
ESET, spol. s r.o.ESET Server Security for Microsoft Windows Server>= 8.0, < 9.0.12012.0
ESET, spol. s r.o.ESET File Security for Microsoft Windows Server6.0 8.0.12013.0
ESET, spol. s r.o.ESET Mail Security for Microsoft Exchange Server>= 6.0, < 8.0.10020.0
ESET, spol. s r.o.ESET Mail Security for IBM Domino>= 6.0, < 8.0.14011.0
ESET, spol. s r.o.ESET Security for Microsoft SharePoint Server>= 6.0, < 8.0.15009.0

References

Timeline

Published
May 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-378527.8ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate priviCVE-2021-378596.1Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.CVE-2021-37865.5A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be usedCVE-2021-378606.1Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary webCVE-2021-378617.5Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.CVE-2021-378625.4Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into CVE-2021-378635.7Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a cCVE-2021-378646.5Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to vCVE-2021-378655.7Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which alCVE-2021-378667.5Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allowsCVE-2021-378674.3Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authentiCVE-2021-37877.8A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the M
CVE-2021-37851: High severity, CVSS 7.8 | Vulnix