How many Symantec Symantec Endpoint Protection CVEs are in CISA KEV?

None of Symantec Symantec Endpoint Protection's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Symantec Symantec Endpoint Protection vulnerabilities?

Yes — 1 of Symantec Symantec Endpoint Protection's CVEs have a known public exploit.

Which versions of Symantec Symantec Endpoint Protection are affected?

5 distinct Symantec Symantec Endpoint Protection versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Symantec Symantec Endpoint Protection CVEs?

Symantec Symantec Endpoint Protection's CVEs most often map to these CWE weakness types: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition).

What is the average severity of Symantec Symantec Endpoint Protection CVEs?

The average CVSS base score across Symantec Symantec Endpoint Protection's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Symantec

6 CVEs

Symantec Endpoint Protection Vulnerabilities

Name: Symantec Endpoint Protection vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Symantec Endpoint Protection by Symantec.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.0

Avg CVSS

2017–2025

Last updated April 30, 2025

Overview

Symantec Endpoint Protection has 6 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Symantec Endpoint Protection, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Symantec Endpoint Protection's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Symantec Endpoint Protection's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Symantec Endpoint Protection's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Symantec Endpoint Protection version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= Prior to 14 RU1 MP1 or 12.1 RU6 MP102 CVEs
>= 119.1.7.81 CVE
>= Prior to SEP 12.1 RU6 MP91 CVE
>= Prior to SEP 14 RU11 CVE

Fixed in

119.1.7.81 CVE

Find a version

6 CVEs

Sort

Symantec Endpoint Protection Elevation of Privilege
CVE-2025-3599
Patch
CWE-367
High · CVSS 7.5
EPSS 0.3% (17th pct)2025-04-30
High vulnerability · 2018-06-20
CVE-2018-5237
High · CVSS 8.8
EPSS 2.0% (78th pct)2018-06-20
Medium vulnerability · 2018-06-20
CVE-2018-5236
Medium · CVSS 5.3
EPSS 1.1% (62th pct)2018-06-20
High vulnerability · 2017-11-06
CVE-2017-6331
Public exploit
Patch
High · CVSS 7.1
EPSS 1.7% (75th pct)2017-11-06
High vulnerability · 2017-11-06
CVE-2017-13681
Patch
High · CVSS 7.8
EPSS 0.4% (35th pct)2017-11-06
Medium vulnerability · 2017-11-06
CVE-2017-13680
Patch
Medium · CVSS 5.5
EPSS 0.4% (32th pct)2017-11-06

Common weakness types

The CWE weakness categories most often found in Symantec Endpoint Protection CVEs. Follow any weakness for its full explanation.

CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVE

Disclosure activity by year

How many Symantec Endpoint Protection CVEs were published each year.

2017

3

2018

2

2025

1

Other Symantec products

Browse vulnerabilities for other products by Symantec.

endpoint protection71 CVEs norton antivirus67 CVEs endpoint protection manager41 CVEs norton internet security40 CVEs web gateway35 CVEs messaging gateway29 CVEs client security27 CVEs altiris deployment solution24 CVEs

All Symantec vulnerabilities

Frequently asked questions

Common questions about Symantec Endpoint Protection vulnerabilities.

How many CVEs does Symantec Symantec Endpoint Protection have?: Symantec Symantec Endpoint Protection has 6 published CVE records since 2017.
How many Symantec Symantec Endpoint Protection CVEs are in CISA KEV?: None of Symantec Symantec Endpoint Protection's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Symantec Symantec Endpoint Protection vulnerabilities?: Yes — 1 of Symantec Symantec Endpoint Protection's CVEs have a known public exploit.
Which versions of Symantec Symantec Endpoint Protection are affected?: 5 distinct Symantec Symantec Endpoint Protection versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Symantec Symantec Endpoint Protection CVEs?: Symantec Symantec Endpoint Protection's CVEs most often map to these CWE weakness types: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition).
What is the average severity of Symantec Symantec Endpoint Protection CVEs?: The average CVSS base score across Symantec Symantec Endpoint Protection's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Symantec Endpoint Protection vulnerabilities

Monitor new Symantec Endpoint Protection vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing