CVE-2025-13919

Summary

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry.

Affected Software

VendorProductVersion RangeStatus
BroadcomSymantec Endpoint Protection Windows Client14.3.12154.10000affected
BroadcomSymantec Endpoint Protection Windows Client14.3.12167.10000unaffected

Weaknesses

  • CWE-427: CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References