Skip to content
OpenAdvisories
Medium · 4.4 CVE-2025-13919 EUVD-2025-206456GHSA-76fr-3xrv-xw26

Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client

Published Jan 28, 2026 · Updated Jan 30, 2026 · Assigned by symantec

Description

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry.

Affected products

VendorProductAffectedFixed
Broadcom Symantec Endpoint Protection Windows Client 14.3.12154.10000 14.3.12167.10000

Advisories 1

References