CVE-2021-35957: Stormshield Endpoint Security

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in %WINDIR%\system32) with malicious ones.

Affected products

• Stormshield Endpoint Security: from 2.0.0, up to and including 2.0.2

Published 2021-07-13. Last modified 2026-06-17.