Log in Start free

Vulnerability · Published Jan 28, 2026 · Assigned by symantec

CVE-2025-13918Elevation of Privileges in Symantec Endpoint Protection Windows Client

Medium 6.7

In plain English

A medium-severity privilege mismanagement in Symantec Endpoint Protection Windows Client from Broadcom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.2%top 94.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected products (as reported)

VendorProductVersions
Broadcom Symantec Endpoint Protection Windows Client 14.3.12154.10000

Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References