PT-2026-5143 · Symantec · Symantec Endpoint Protection

Gregory Draperi · CVE-2025-13919 · Published 2026-01-28 · Updated 2026-01-30

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.3 RU10 Patch 1 Symantec Endpoint Protection versions prior to 14.3 RU9 Patch 2 Symantec Endpoint Protection versions prior to 14.3 RU8 Patch 3

Description The software may be susceptible to a COM Hijacking issue. This type of issue allows an attacker to attempt to establish persistence and evade detection by hijacking COM references in the Windows Registry.

Recommendations Update to Symantec Endpoint Protection 14.3 RU10 Patch 1 or later. Update to Symantec Endpoint Protection 14.3 RU9 Patch 2 or later. Update to Symantec Endpoint Protection 14.3 RU8 Patch 3 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-13919

Affected Products

Symantec Endpoint Protection

References · 5

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36774 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13919 · Security Note
• https://twitter.com/CVEnew/status/2016562112412471590 · Twitter Post
• https://t.me/cveNotify/150372 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2016594159549702644 · Twitter Post