Symantec vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Symantec flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2017-6327 Symantec Messaging Gateway Remote Code ExecutionExploited since Nov 3, 2021 · CVSS 8.8

Latest high and critical flaws

• CVE-2026-8501 Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM deHigh 7.8 · Jun 1, 2026
• CVE-2025-0893 Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.High 7.8 · Feb 19, 2025
• CVE-2024-23617 A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before.Critical 9.6 · Jan 25, 2024
• CVE-2024-23616 A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before.Critical 10 · Jan 25, 2024
• CVE-2024-23615 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before.Critical 10 · Jan 25, 2024
• CVE-2024-23614 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before.Critical 10 · Jan 25, 2024
• CVE-2024-23613 A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens.Critical 10 · Jan 25, 2024
• CVE-2022-37015 Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue Critical 9.8 · Nov 8, 2022
• CVE-2022-25623 The Symantec Management Agent is susceptible to a privilege escalation vulnerability.High 7.8 · Mar 4, 2022
• CVE-2021-30642 An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote,Critical 9.8 · Apr 27, 2021
• CVE-2020-12593 Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentiHigh 7.5 · Nov 18, 2020
• CVE-2020-5839 Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potenHigh 7.5 · Jul 8, 2020
• CVE-2020-5837 Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to aHigh 7.8 · May 11, 2020
• CVE-2020-5836 Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection fHigh 7.8 · May 11, 2020
• CVE-2020-5835 Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remotHigh 7 · May 11, 2020
• CVE-2020-5832 Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of isHigh 7.8 · Apr 6, 2020
• CVE-2020-5823 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectiHigh 7.8 · Feb 11, 2020
• CVE-2020-5822 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectiHigh 7.8 · Feb 11, 2020
• CVE-2020-5821 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectiHigh 7.8 · Feb 11, 2020
• CVE-2020-5820 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectiHigh 7.8 · Feb 11, 2020
• CVE-2016-6592 A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6.High 7.8 · Jan 14, 2020
• CVE-2019-19548 Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to High 7.8 · Jan 14, 2020
• CVE-2016-5311 A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton IntHigh 7.8 · Jan 9, 2020
• CVE-2016-6593 A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious userHigh 7.8 · Jan 8, 2020
• CVE-2016-6591 A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let a local malicious usHigh 7.1 · Jan 8, 2020