CVE-2019-12758

Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signature...

EUVD-2020-26985

Malware in sbrugna...

CVE-2020-5831

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5830

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

Out-of-bounds

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

Design/Logic Flaw

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a DLL injection vulnerability, which is a type of issue whereby an individual attempts to execute their own code ...

CVE-2020-5831

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5830

Symantec Endpoint Protection Manager (SEPM) is affected by CVE-2020-5830, an out-of-bounds read vulnerability in SEPM prior to 14.2 RU2 MP1. The issue allows memory reading beyond allocated bounds in SEPM (and is part of multiple SEPM/SEP hardening advisories). The ZDI advisory specifies an infor...

CVE-2020-5829

CVE-2020-5829 affects Symantec Endpoint Protection Manager (SEPM) prior to 14.2 RU2 MP1 . It is an out-of-bounds read vulnerability in SEPM (notably via the secars.dll path) that can allow a local attacker to read memory outside allocated bounds. An attacker would need to execute low-privilege co...

CVE-2020-5828

CVE-2020-5828 affects Symantec Endpoint Protection Manager (SEPM) prior to 14.2 RU2 MP1, with an out-of-bounds vulnerability (read beyond allocated memory). ZDI details indicate it enables a local attacker who has code execution privileges to achieve an information disclosure by reading memory ou...

CVE-2020-5827

CVE-2020-5827 affects Symantec Endpoint Protection Manager (SEPM) prior to 14.2 RU2 MP1. The issue is an out-of-bounds read vulnerability, with sources describing an attack path in which an unauthenticated or low-privilege scenario could disclose memory contents or be leveraged alongside other fl...

CVE-2020-5826

Summary: CVE-2020-5826 affects Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, with an out-of-bounds vulnerability that can cause the application to read memory outside allocated bounds. Technical details:...

Privilege escalation

Symantec Endpoint Protection Manager SEPM and Symantec Mail Security for MS Exchange SMSMSE, prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software applicati...

CVE-2019-18372

Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

CVE-2019-18372

CVE-2019-18372 concerns a local privilege-escalation vulnerability in Symantec Endpoint Protection (SEP) client and related components. According to Red Hat and Symantec advisories, SEP versions prior to 14.2 RU2 (and related SEPM/SMSMSE lines) are affected by privilege escalation, with attackers...

CVE-2019-12757

Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) are affected by CVE-2019-12757, a privilege-escalation flaw in versions before 14.2 RU2 and 12.1 RU6 MP10d (SEP SBE 12.1.7510.7002). The vulnerability allows an attacker with local access to elevate privileges within the ...