CVE-2022-25631

CVE-2022-25631 affects Symantec Endpoint Protection (SEP) Client/Endpoint Protection before 14.3 RU6 (14.3.9210.6000). The vulnerability is described as a local elevation of privilege, arising from insufficient access control that could allow a privileged attacker to compromise the SEP client. Pu...

CVE-2022-37017

CVE-2022-37017 affects Symantec Endpoint Protection Client for Windows prior to 14.3 RU6 (and 14.3 RU5 Patch 1). The vulnerability targets UI Password protection and Policy Import/Export Password protection, allowing a security control bypass. Root-cause details in public disclosures describe a b...