CVE-2004-2147

Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service crash via malformed e-mail messages 1 without a body or 2 without a carriage return "\n" separating the headers from the body...

CVE-2005-2017

Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540...

CVE-2002-1937

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password...

CVE-2008-4388

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...

CVE-2025-3599

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...

CVE-2025-3599

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...

CVE-2025-3599

CVE-2025-3599 affects the Symantec Endpoint Protection Windows Agent with the ERASER Engine prior to 119.1.7.8. The vulnerability is an Elevation of Privilege that may allow an attacker to delete resources normally protected from an application or user. Affected component: ERASER Engine in the SE...

CVE-2025-3599 Symantec Endpoint Protection Elevation of Privilege

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...

CVE-2025-3599 Symantec Endpoint Protection Elevation of Privilege

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...

PT-2025-18297 · Symantec · Symantec Endpoint Protection

Name of the Vulnerable Software and Affected Versions: Symantec Endpoint Protection Windows Agent versions prior to 119.1.7.8 Description: The issue concerns an Elevation of Privilege vulnerability. This vulnerability may allow an attacker to delete resources that are normally protected from an...

CVE-2025-3599: Time-of-check Time-of-use (TOCTOU) Race Condition

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...

Broadcom Symantec Endpoint Protection Windows Agent 安全漏洞

Broadcom Symantec Endpoint Protection Windows Agent is a client component of an endpoint security solution from Broadcom, Inc. A security vulnerability exists in Broadcom Symantec Endpoint Protection Windows Agent versions prior to 119.1.7.8, which stems from an elevation of privilege vulnerabili...

Symantec Demonstrates OpenAI’s Operator Agent in PoC Phishing Attack

Symantec demonstrates OpenAI's Operator Agent in PoC phishing attack, highlighting AI security risks and the need for proper cybersecurity...

CVE-2025-0893

Symantec Diagnostic Tool SymDiag, prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability...

CVE-2025-0893

Symantec Diagnostic Tool SymDiag, prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability...

CVE-2025-0893

Symantec Diagnostic Tool SymDiag, prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability...

CVE-2025-0893

Symantec Diagnostic Tool SymDiag, prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability...

CVE-2025-0893

Symantec Diagnostic Tool (SymDiag) versions before 3.0.79 are affected by CVE-2025-0893, a Privilege Escalation vulnerability. The issue is documented with CVSSv3.1 base score 7.8 (HIGH), leveraging local access with low complexity and no user interaction. Remediation is to update to version 3.0....

Broadcom Symantec Diagnostic Tool 安全漏洞

Broadcom Symantec Diagnostic Tool SymDiag is a multi-product, multi-language diagnostic and security analysis utility from Broadcom Corporation. A security vulnerability exists in Broadcom Symantec Diagnostic Tool versions prior to 3.0.79 that stems from the presence of an elevation of privilege...

PT-2025-7474 · Wss Agent +1 · Wss Agent +1

Name of the Vulnerable Software and Affected Versions: Symantec Diagnostic Tool SymDiag versions prior to 3.0.79 Description: The issue is a Privilege Escalation vulnerability that may affect Symantec Diagnostic Tool SymDiag. It is only applicable to the combination of SymDiag and the WSS Agent...