Symantec vulnerabilities
101 CVEs and advisories name Symantec as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-8501CVE-2026-8501
- CVE-2025-3599Symantec Endpoint Protection Elevation of Privilege
- CVE-2024-11035Carbon Black Cloud Windows Sensor Information Leak
- CVE-2025-0893Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.
- CVE-2024-23617Symantec Data Loss Prevention Buffer Overflow
- CVE-2024-23616Symantec Server Management Suite Buffer Overflow
- CVE-2024-23615Symantec Messaging Gateway Buffer Overflow
- CVE-2024-23614Symantec Messaging Gateway Buffer Overflow
- CVE-2024-23613Symantec Deployment Solution Remote Code Execution
- CVE-2023-23958Symantec Protection Engine Hash Leak Vulnerability
- CVE-2016-6592A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6.
- CVE-2019-19548Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an atta
- CVE-2019-19547Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue.
- CVE-2016-5311A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security wit
- CVE-2016-6585A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious us
- CVE-2016-6587An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android befo
- CVE-2016-6586A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct
- CVE-2016-6588A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0.
- CVE-2016-6589A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0.
- CVE-2016-6590A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4
- CVE-2016-6591A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let
- CVE-2016-6593A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let
- CVE-2019-18380Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentia
- CVE-2019-18374Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, wh
- CVE-2019-18373Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit.
- CVE-2019-12752The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow
- CVE-2019-9699Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of vulnerability that c
- CVE-2019-12755Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereb
- CVE-2019-9697An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authent
- CVE-2019-12753An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator us