What’s Vulnerable › Vulnerabilities
CVE-2021-47739: Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path
- Severity: high (CVSS 8.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-23 · updated 2026-06-17
- Weakness: CWE-428
Description
Epic Games Easy Anti-Cheat 4.0 contains an unquoted service path vulnerability that allows local non-privileged users to execute arbitrary code with elevated system privileges. Attackers can exploit the service configuration by inserting malicious code in the system root path that would execute with LocalSystem privileges during application startup.
Affected products
References
- https://www.easy.ac
- https://www.epicgames.com
- https://www.exploit-db.com/exploits/49841
- https://www.vulncheck.com/advisories/epic-games-easy-anti-cheat-local-privilege-escalation-via-unquoted-service-path
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5652.php
Get alerted when CVE-2021-47739 or the next vulnerability affects your stack