PT-2026-5142 · Symantec · Symantec Endpoint Protection

Sandro Poppi · CVE-2025-13918 · Published 2026-01-28 · Updated 2026-01-28

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.3 RU10 Patch 1 Symantec Endpoint Protection versions prior to 14.3 RU9 Patch 2 Symantec Endpoint Protection versions prior to 14.3 RU8 Patch 3

Description The software may be susceptible to an Elevation of Privilege issue, which could allow an attacker to gain elevated access to normally protected resources.

Recommendations Update Symantec Endpoint Protection to version 14.3 RU10 Patch 1 or later. Update Symantec Endpoint Protection to version 14.3 RU9 Patch 2 or later. Update Symantec Endpoint Protection to version 14.3 RU8 Patch 3 or later.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-13918

Affected Products

Symantec Endpoint Protection

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-13918 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36774 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2016599279805096275 · Twitter Post
• https://twitter.com/CVEnew/status/2016562113326858700 · Twitter Post