What’s Vulnerable › Vulnerabilities

CVE-2021-3576: Privilege escalation via SeImpersonatePrivilege

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-28 · updated 2026-06-17
• Weakness: CWE-250

Description

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26.

Affected products

• Bitdefender Endpoint Security Tools: before 7.2.1.65 — fixed in 7.2.1.65
• Bitdefender Total Security: before 25.0.26 — fixed in 25.0.26

How to fix

Upgrade to a fixed version: Bitdefender Endpoint Security Tools 7.2.1.65; Bitdefender Total Security 25.0.26. Check the vendor advisory for mitigations.

References

• https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-seimpersonateprivilege-in-bitdefender-endpoint-security-tools-va-9848/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1276/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1376/
• https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-seimpersonateprivilege-in-bitdefender-endpoint-security-tools-va-9848/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1276/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1376/

Get alerted when CVE-2021-3576 or the next vulnerability affects your stack