Skip to content
OpenAdvisories
Medium WID-SEC-2026-0249 2 CVEs

Symantec Endpoint Protection: Mehrere Schwachstellen

Published Jan 28, 2026 · Updated Apr 28, 2026 · Revision 2 · de-DE

Vendor: Symantec Product: Endpoint Protection Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Symantec Endpoint Protection ausnutzen, um seine Privilegien zu erhöhen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Symantec Endpoint Protection ist ein Sicherheitssoftware Paket. Es enthält Antivirus, Antispyware, Firewall, Intrusion Prevention und Komponenten zur Applikationsüberwachung.

Vulnerabilities 2

  • Medium 6.7
    CVE-2025-13918

    Elevation of Privileges in Symantec Endpoint Protection Windows Client

    Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain eleva…

    Broadcom Symantec Endpoint Protection Windows Client Windows
  • Medium 4.4
    CVE-2025-13919

    Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client

    Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM re…

    Broadcom Symantec Endpoint Protection Windows Client Windows

Revision history

  1. #2

    Referenz(en) aufgenommen: SYMSA36774

  2. #1

    Initiale Fassung

References