CVE-2021-37852 LPE in ESET products for Windows

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM...

CVE-2021-37852

The CVE-2021-37852 entry describes a local privilege-escalation in ESET products for Windows where an untrusted process impersonates the client of a named pipe. This impersonation (named-pipe client) allows a local attacker to escalate to NT AUTHORITY\SYSTEM. Documents from ZDI and NVD confirm th...

CVE-2021-37852

creationtimestamp| type| source ---|---|--- 2022-02-02 13:32:10+00:00| seen| https://t.me/informationsecuritychannel/46518 2022-02-03 16:00:44+00:00| exploited| https://t.me/truesecator/2588...