We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-3599

Symantec Endpoint Protection Elevation of Privilege



Description

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.

Reserved 2025-04-14 | Published 2025-04-30 | Updated 2025-04-30 | Assigner symantec


MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Problem types

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Product status

Default status
unaffected

119.1.7.8
unaffected

References

support.broadcom.com/...l/content/SecurityAdvisories/0/25659

cve.org (CVE-2025-3599)

nvd.nist.gov (CVE-2025-3599)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-3599

Support options

Helpdesk Chat, Email, Knowledgebase