PT-2025-18297 · Symantec · Symantec Endpoint Protection

Published 2025-04-30 · Updated 2025-08-21 · CVE-2025-3599

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Windows Agent versions prior to 119.1.7.8

Description The issue concerns an Elevation of Privilege vulnerability. This vulnerability may allow an attacker to delete resources that are normally protected from an application or user.

Recommendations For versions prior to 119.1.7.8, update the ERASER Engine to version 119.1.7.8 or later to resolve the issue.

Fix

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2025-09913

CVE-2025-3599

Affected Products

Symantec Endpoint Protection

References · 9

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-3599 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3599 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09913 · Security Note
• https://t.me/cvedetector/24129 · Telegram Post
• https://t.me/cveNotify/133035 · Telegram Post
• https://t.me/cvetracker/22731 · Telegram Post
• https://twitter.com/CVEnew/status/1917628554155811264 · Twitter Post
• https://twitter.com/autumn_good_35/status/1917599425939267824 · Twitter Post