CVE-2025-13918

Summary

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected Software

VendorProductVersion RangeStatus
BroadcomSymantec Endpoint Protection Windows Client14.3.12154.10000affected
BroadcomSymantec Endpoint Protection Windows Client14.3.12167.10000unaffected

Weaknesses

  • CWE-269: CWE-269 Improper Privilege Management

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References