CVE-2021-37852: Eset Endpoint Antivirus

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Affected products

• Eset Endpoint Antivirus: from 6.6.2046.0, before 7.3.2055.0 (fixed in 7.3.2055.0); from 8.0, before 8.0.2028.3 (fixed in 8.0.2028.3); from 8.1, before 8.1.2031.4 (fixed in 8.1.2031.4); from 9.0, before 9.0.2032.6 (fixed in 9.0.2032.6)
• Eset Endpoint Security: from 6.6.2046.0, before 7.3.2055.0 (fixed in 7.3.2055.0); from 8.0, before 8.0.2028.3 (fixed in 8.0.2028.3); from 8.1, before 8.1.2031.4 (fixed in 8.1.2031.4); from 9.0, before 9.0.2032.6 (fixed in 9.0.2032.6)
• Eset File Security: from 7.0.12014.0, up to and including 7.3.12006.0
• Eset Internet Security: from 10.0.337.1, before 15.0.18.0 (fixed in 15.0.18.0)
• Eset Mail Security: from 7.0.10019, before 7.3.10014.0 (fixed in 7.3.10014.0); from 7.0.14008.0, before 7.3.14003.0 (fixed in 7.3.14003.0); from 8.0, before 8.0.14006.0 (fixed in 8.0.14006.0); from 8.0.10012.0, before 8.0.10018.0 (fixed in 8.0.10018.0)
• Eset NOD32 Antivirus: from 10.0.337.1, up to and including 15.0.18.0
• Eset Security: from 7.0.15008.0, up to and including 8.0.15004.0
• Eset Server Security: from 7.0.12016.1002, up to and including 7.2.12004.1000; version 8.0.12003.0 only; version 8.0.12003.1 only
• Eset Smart Security: from 10.0.337.1, up to and including 15.0.18.0

Published 2022-02-09. Last modified 2026-06-17.