PT-2026-5142 · Symantec · Symantec Endpoint Protection

Sandro Poppi · Publicado 2026-01-28 · Atualizado 2026-01-28 · CVE-2025-13918

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.3 RU10 Patch 1 Symantec Endpoint Protection versions prior to 14.3 RU9 Patch 2 Symantec Endpoint Protection versions prior to 14.3 RU8 Patch 3

Description The software may be susceptible to an Elevation of Privilege issue, which could allow an attacker to gain elevated access to normally protected resources.

Recommendations Update Symantec Endpoint Protection to version 14.3 RU10 Patch 1 or later. Update Symantec Endpoint Protection to version 14.3 RU9 Patch 2 or later. Update Symantec Endpoint Protection to version 14.3 RU8 Patch 3 or later.

Correção

LPE

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2025-13918

Produtos afetados

Symantec Endpoint Protection

Referências · 4

• https://twitter.com/VulmonFeeds/status/2016599279805096275 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-13918 · Nota de Segurança
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36774 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2016562113326858700 · Publicação no Twitter