Vendor
Symantec
101 known vulnerabilities.
Symantec at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 1 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 1 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
Latest advisories
-
Medium
Symantec Web Gateway: Schwachstelle ermöglicht Cross-Site Scripting
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Symantec Web Gateway ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
first Mar 13, 2017 -
Critical max 10.0
Apache log4j: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Programmcode auszuführen.
first Dec 9, 2021 -
Medium max 5.4WID-SEC-2026-1885 1 CVE
Symantec Endpoint Protection (CleanWipe Removal Tool): Schwachstelle ermöglicht Erlangen von Administratorrechten
Ein lokaler Angreifer kann eine Schwachstelle im CleanWipe Removal Tool für Symantec Endpoint Protection auf macOS ausnutzen, um Administratorrechte zu erlangen.
-
Medium max 6.5
Symantec Endpoint Protection (ERASER Engine): Schwachstelle ermöglicht Privilegieneskalation
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Symantec Endpoint Protection ausnutzen, um seine Privilegien zu erhöhen.
first May 1, 2025 -
Medium max 6.7
Symantec Endpoint Protection: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Symantec Endpoint Protection ausnutzen, um seine Privilegien zu erhöhen, und um Sicherheitsvorkehrungen zu umgehen.
first Jan 28, 2026
101 results · Feed
-
High 7.8
CVE-2026-8501
Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or…
-
Medium 6.5
Symantec Endpoint Protection Elevation of Privilege
Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.
-
Low 2.5
Carbon Black Cloud Windows Sensor Information Leak
Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive information may b exposed due to a vulnerability in software.
-
High 7.8
Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.
-
Critical 9.6
Symantec Data Loss Prevention Buffer Overflow
A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.
-
Critical 10.0
Symantec Server Management Suite Buffer Overflow
A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.
-
Critical 10.0
Symantec Messaging Gateway Buffer Overflow
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
-
Critical 10.0
Symantec Messaging Gateway Buffer Overflow
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
-
Critical 10.0
Symantec Deployment Solution Remote Code Execution
A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.
-
Medium 6.8
Symantec Protection Engine Hash Leak Vulnerability
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.
-
Unscored —
A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a special…
-
Unscored —
Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of …
-
Unscored —CVE-2019-19547 Public exploit
Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) iss…
-
Unscored —
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security…
-
Unscored —
A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let …
-
Unscored —
An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Secu…
-
Unscored —
A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a ma…
-
Unscored —
A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Managemen…
-
Unscored —
A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Su…
-
Unscored —
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite…
-
Unscored —
A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enab…
-
Unscored —
A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.…
-
Unscored —
Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issu…
-
Unscored —
Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication byp…
-
Unscored —
Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit …
-
Unscored —
The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which cou…
-
Unscored —
Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of…
-
Unscored —
Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of…
-
Unscored —
An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allow…
-
Unscored —
An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authentic…
-
Unscored —
Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting…
-
Unscored —
The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp…
-
Unscored —
The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp…
-
Unscored —
Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is…
-
Unscored —CVE-2019-9702 Public exploit
Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is…
-
Unscored —
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptibl…
-
Unscored —
Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 …
-
Unscored —
SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (a…
-
Unscored —
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-2…
-
Unscored —
Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which …