CVE-2021-34998
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-34998
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the use of named pipes. The issue results from allowing an untrusted process to impersonate the client of a pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-14208.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
带着不必要的权限执行
Source: NVD (National Vulnerability Database)
Vulnerability Title
Panda Security Free Antivirus 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Panda Security Free Antivirus是西班牙熊猫安全（Panda Security）公司的一款免费的杀毒软件。 Panda Security Free Antivirus 存在权限许可和访问控制问题漏洞，攻击者可以利用此漏洞在SYSTEM上下文中提升权限并执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Panda Security | Free Antivirus | 20.2.0.0 | - |
II. Public POCs for CVE-2021-34998
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-34998
请登录查看更多情报信息。
- https://www.zerodayinitiative.com/advisories/ZDI-21-1336/x_refsource_MISC
- https://www.pandasecurity.com/en/support/card?id=100077x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-34998
IV. Related Vulnerabilities
Same product: Free Antivirus
- CVE-2025-10905
Collision in minifilter driver of Avast Free Antivirus resul - CVE-2024-7233
Avast Free Antivirus AvastSvc Link Following Local Privilege - CVE-2024-7232
Avast Free Antivirus AvastSvc Link Following Local Privilege - CVE-2024-7227
Avast Free Antivirus AvastSvc Link Following Local Privilege - CVE-2024-7228
Avast Free Antivirus Link Following Denial-of-Service Vulner
Same vendor: Panda Security
- CVE-2025-34109
Panda Security PSEvents.exe Insecure DLL Loading Privilege E - CVE-2024-13043
Panda Security Dome Link Following Local Privilege Escalatio - CVE-2024-7245
Panda Security Dome VPN Incorrect Permission Assignment Loca - CVE-2024-7242
Panda Security Dome Link Following Local Privilege Escalatio - CVE-2024-7241
Panda Security Dome Link Following Local Privilege Escalatio
Same weakness: CWE-250
- CVE-2026-42088
OpenC3 COSMOS: Administrative Actions via the Script Runner - CVE-2026-40550
Privilege Escalation in mpGabinet - CVE-2026-25908
Dell Alienware Command Center 安全漏洞 - CVE-2026-4667
HP System Optimizer - Escalation of Privilege - CVE-2026-33793
Junos OS and Junos OS Evolved: When an unsigned Python op sc
V. Comments for CVE-2021-34998
No comments yet