CVE-2025-13918CWE-269

Elevation of Privileges in Symantec Endpoint Protection Windows Client

Medium · published January 28, 2026

CVSS v3.1
6.7
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-01-28T16:35Z
EPSS history
Timeline
  • 28 JAN 16:35Z
    Elevation of Privileges in Symantec Endpoint Protection Windows Client
    cvelistv5