CVE-2025-3599CWE-367

Symantec Endpoint Protection Elevation of Privilege

Medium · published April 30, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00285 · 20.0th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2025-04-30T16:49Z
EPSS history
Timeline
  • 30 APR 16:49Z
    Symantec Endpoint Protection Elevation of Privilege
    cvelistv5