6.5Media
CVE-2025-3599Symantec Endpoint Protection Elevation of Privilege
Descripción
Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.
Debilidad (CWE):
CWE-367
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| broadcom | symantec eraser engine | < 119.1.7.8 | |
| Symantec | Symantec Endpoint Protection | fixed 119.1.7.8 |
Referencias y parches
Coincidencias CPE (NVD) (1)
cpe:2.3:a:broadcom:symantec_eraser_engine:*:*:*:*:*:*:*:*< 119.1.7.8