# cve.now: Symantec

The newest entries naming Symantec as an affected vendor (up to 200), of 101 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-8501](https://cve.now/CVE-2026-8501.md): CVE-2026-8501 (CVSS 7.8)
- [CVE-2025-3599](https://cve.now/CVE-2025-3599.md): Symantec Endpoint Protection Elevation of Privilege (CVSS 6.5)
- [CVE-2024-11035](https://cve.now/CVE-2024-11035.md): Carbon Black Cloud Windows Sensor Information Leak (CVSS 2.5)
- [CVE-2025-0893](https://cve.now/CVE-2025-0893.md): Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability. (CVSS 7.8)
- [CVE-2024-23617](https://cve.now/CVE-2024-23617.md): Symantec Data Loss Prevention Buffer Overflow (CVSS 9.6)
- [CVE-2024-23616](https://cve.now/CVE-2024-23616.md): Symantec Server Management Suite Buffer Overflow (CVSS 10.0)
- [CVE-2024-23615](https://cve.now/CVE-2024-23615.md): Symantec Messaging Gateway Buffer Overflow (CVSS 10.0)
- [CVE-2024-23614](https://cve.now/CVE-2024-23614.md): Symantec Messaging Gateway Buffer Overflow (CVSS 10.0)
- [CVE-2024-23613](https://cve.now/CVE-2024-23613.md): Symantec Deployment Solution Remote Code Execution (CVSS 10.0)
- [CVE-2023-23958](https://cve.now/CVE-2023-23958.md): Symantec Protection Engine Hash Leak Vulnerability (CVSS 6.8)
- [CVE-2016-6592](https://cve.now/CVE-2016-6592.md): A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. (no CVSS)
- [CVE-2019-19548](https://cve.now/CVE-2019-19548.md): Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an atta (no CVSS)
- [CVE-2019-19547](https://cve.now/CVE-2019-19547.md): Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. (no CVSS)
- [CVE-2016-5311](https://cve.now/CVE-2016-5311.md): A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security wit (no CVSS)
- [CVE-2016-6585](https://cve.now/CVE-2016-6585.md): A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious us (no CVSS)
- [CVE-2016-6587](https://cve.now/CVE-2016-6587.md): An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android befo (no CVSS)
- [CVE-2016-6586](https://cve.now/CVE-2016-6586.md): A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct (no CVSS)
- [CVE-2016-6588](https://cve.now/CVE-2016-6588.md): A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0. (no CVSS)
- [CVE-2016-6589](https://cve.now/CVE-2016-6589.md): A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0. (no CVSS)
- [CVE-2016-6590](https://cve.now/CVE-2016-6590.md): A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 (no CVSS)
- [CVE-2016-6591](https://cve.now/CVE-2016-6591.md): A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let (no CVSS)
- [CVE-2016-6593](https://cve.now/CVE-2016-6593.md): A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let (no CVSS)
- [CVE-2019-18380](https://cve.now/CVE-2019-18380.md): Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentia (no CVSS)
- [CVE-2019-18374](https://cve.now/CVE-2019-18374.md): Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, wh (no CVSS)
- [CVE-2019-18373](https://cve.now/CVE-2019-18373.md): Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. (no CVSS)
- [CVE-2019-12752](https://cve.now/CVE-2019-12752.md): The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow (no CVSS)
- [CVE-2019-9699](https://cve.now/CVE-2019-9699.md): Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of vulnerability that c (no CVSS)
- [CVE-2019-12755](https://cve.now/CVE-2019-12755.md): Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereb (no CVSS)
- [CVE-2019-9697](https://cve.now/CVE-2019-9697.md): An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authent (no CVSS)
- [CVE-2019-12753](https://cve.now/CVE-2019-12753.md): An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator us (no CVSS)
- [CVE-2019-12754](https://cve.now/CVE-2019-12754.md): Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which (no CVSS)
- [CVE-2018-18371](https://cve.now/CVE-2018-18371.md): The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web brow (no CVSS)
- [CVE-2018-18370](https://cve.now/CVE-2018-18370.md): The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web brow (no CVSS)
- [CVE-2019-9703](https://cve.now/CVE-2019-9703.md): Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that (no CVSS)
- [CVE-2019-9702](https://cve.now/CVE-2019-9702.md): Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that (no CVSS)
- [CVE-2018-18367](https://cve.now/CVE-2018-18367.md): Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading (no CVSS)
- [CVE-2018-18366](https://cve.now/CVE-2018-18366.md): Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to (no CVSS)
- [CVE-2018-12244](https://cve.now/CVE-2018-12244.md): SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula (no CVSS)
- [CVE-2018-18369](https://cve.now/CVE-2018-18369.md): Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1. (no CVSS)
- [CVE-2019-9694](https://cve.now/CVE-2019-9694.md): Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue wh (no CVSS)
- [CVE-2019-9696](https://cve.now/CVE-2019-9696.md): Symantec VIP Enterprise Gateway (all versions) may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can (no CVSS)
- [CVE-2018-18364](https://cve.now/CVE-2018-18364.md): Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue (no CVSS)
- [CVE-2018-12237](https://cve.now/CVE-2018-12237.md): The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. (no CVSS)
- [CVE-2018-18363](https://cve.now/CVE-2018-18363.md): Norton App Lock prior to 1.4.0.445 can be susceptible to a bypass exploit. (no CVSS)
- [CVE-2018-18362](https://cve.now/CVE-2018-18362.md): Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) exploit, which is a t (no CVSS)
- [CVE-2018-12245](https://cve.now/CVE-2018-12245.md): Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can (no CVSS)
- [CVE-2018-12239](https://cve.now/CVE-2018-12239.md): Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Editio (no CVSS)
- [CVE-2018-12238](https://cve.now/CVE-2018-12238.md): Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Editio (no CVSS)
- [CVE-2018-12241](https://cve.now/CVE-2018-12241.md): The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. (no CVSS)
- [CVE-2018-12246](https://cve.now/CVE-2018-12246.md): Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerability. (no CVSS)
- [CVE-2018-12243](https://cve.now/CVE-2018-12243.md): The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which is a type of issue w (no CVSS)
- [CVE-2018-12242](https://cve.now/CVE-2018-12242.md): The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that (no CVSS)
- [CVE-2018-12240](https://cve.now/CVE-2018-12240.md): The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type (no CVSS)
- [CVE-2018-5238](https://cve.now/CVE-2018-5238.md): Norton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a DLL Preloading vulnerability, which is a type (no CVSS)
- [CVE-2018-5235](https://cve.now/CVE-2018-5235.md): Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an (no CVSS)
- [CVE-2018-5243](https://cve.now/CVE-2018-5243.md): The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploi (no CVSS)
- [CVE-2018-5240](https://cve.now/CVE-2018-5240.md): The Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7 may be susceptible to a privilege escalat (no CVSS)
- [CVE-2018-5239](https://cve.now/CVE-2018-5239.md): Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. (no CVSS)
- [CVE-2018-5237](https://cve.now/CVE-2018-5237.md): Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a t (no CVSS)
- [CVE-2018-5236](https://cve.now/CVE-2018-5236.md): Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). (no CVSS)
- [CVE-2018-5242](https://cve.now/CVE-2018-5242.md): Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. (no CVSS)
- [CVE-2018-5241](https://cve.now/CVE-2018-5241.md): Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerabil (no CVSS)
- [CVE-2017-18268](https://cve.now/CVE-2017-18268.md): Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. (no CVSS)
- [CVE-2017-15533](https://cve.now/CVE-2017-15533.md): Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleiche (no CVSS)
- [CVE-2018-5234](https://cve.now/CVE-2018-5234.md): The Norton Core router prior to v237 may be susceptible to a command injection exploit. (no CVSS)
- [CVE-2017-6323](https://cve.now/CVE-2017-6323.md): The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0\_POST\_HF6, and ITMS 7.6\_POST\_HF7 has an issue whereby XML input containing a (no CVSS)
- [CVE-2016-9094](https://cve.now/CVE-2016-9094.md): Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. (no CVSS)
- [CVE-2016-9093](https://cve.now/CVE-2016-9093.md): A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-i (no CVSS)
- [CVE-2017-13678](https://cve.now/CVE-2017-13678.md): Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. (no CVSS)
- [CVE-2017-13677](https://cve.now/CVE-2017-13677.md): Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. (no CVSS)
- [CVE-2016-10258](https://cve.now/CVE-2016-10258.md): Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. (no CVSS)
- [CVE-2017-15534](https://cve.now/CVE-2017-15534.md): The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. (no CVSS)
- [CVE-2017-15531](https://cve.now/CVE-2017-15531.md): Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interfa (no CVSS)
- [CVE-2016-10257](https://cve.now/CVE-2016-10257.md): The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (p (no CVSS)
- [CVE-2016-10256](https://cve.now/CVE-2016-10256.md): The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerabi (no CVSS)
- [CVE-2017-15532](https://cve.now/CVE-2017-15532.md): Prior to 10.6.4, Symantec Messaging Gateway may be susceptible to a path traversal attack (also known as directory traversal). (no CVSS)
- [CVE-2017-15530](https://cve.now/CVE-2017-15530.md): Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. (no CVSS)
- [CVE-2017-15529](https://cve.now/CVE-2017-15529.md): Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service (DoS) exploit. (no CVSS)
- [CVE-2017-15527](https://cve.now/CVE-2017-15527.md): Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that c (no CVSS)
- [CVE-2017-15526](https://cve.now/CVE-2017-15526.md): Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPoi (no CVSS)
- [CVE-2017-15525](https://cve.now/CVE-2017-15525.md): Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service (DoS) attack, which is a type of attack wher (no CVSS)
- [CVE-2017-6331](https://cve.now/CVE-2017-6331.md): Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that (no CVSS)
- [CVE-2017-13681](https://cve.now/CVE-2017-13681.md): Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issu (no CVSS)
- [CVE-2017-13680](https://cve.now/CVE-2017-13680.md): Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use (no CVSS)
- [CVE-2017-13683](https://cve.now/CVE-2017-13683.md): In Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource leak that can occur when a computer program (no CVSS)
- [CVE-2017-13682](https://cve.now/CVE-2017-13682.md): In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer prog (no CVSS)
- [CVE-2017-13676](https://cve.now/CVE-2017-13676.md): Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. (no CVSS)
- [CVE-2017-6330](https://cve.now/CVE-2017-6330.md): Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted (no CVSS)
- [CVE-2017-13674](https://cve.now/CVE-2017-13674.md): Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. (no CVSS)
- [CVE-2017-6329](https://cve.now/CVE-2017-6329.md): Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. (no CVSS)
- [CVE-2017-6328](https://cve.now/CVE-2017-6328.md): The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is (no CVSS)
- [CVE-2017-6327](https://cve.now/CVE-2017-6327.md): The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an ind (CVSS 8.8, KEV)
- [CVE-2017-6326](https://cve.now/CVE-2017-6326.md): The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain (no CVSS)
- [CVE-2017-6325](https://cve.now/CVE-2017-6325.md): The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to (no CVSS)
- [CVE-2017-6324](https://cve.now/CVE-2017-6324.md): The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially (no CVSS)
- [CVE-2016-9100](https://cve.now/CVE-2016-9100.md): Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to (no CVSS)
- [CVE-2016-9099](https://cve.now/CVE-2016-9099.md): Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6 (no CVSS)
- [CVE-2016-9097](https://cve.now/CVE-2016-9097.md): The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 p (no CVSS)
- [CVE-2016-9092](https://cve.now/CVE-2016-9092.md): The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cro (no CVSS)
- [CVE-2016-10259](https://cve.now/CVE-2016-10259.md): Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerabil (no CVSS)
- [CVE-2016-9091](https://cve.now/CVE-2016-9091.md): Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS com (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/symantec
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.