Symantec - vulnerabilities (CVEs)
583 CVEs in 347 products, 0 in the last 30 days, newest from 2026-06-01.
Products
- Endpoint Protection - 71 CVEs
- Norton Antivirus - 67 CVEs
- Endpoint Protection Manager - 41 CVEs
- Norton Internet Security - 40 CVEs
- Web Gateway - 35 CVEs
- Client Security - 27 CVEs
- Messaging Gateway - 25 CVEs
- Altiris Deployment Solution - 24 CVEs
- Mail Security - 19 CVEs
- Norton System Works - 19 CVEs
- Norton Personal Firewall - 18 CVEs
- Pcanywhere - 18 CVEs
- Antivirus - 15 CVEs
- Enterprise Firewall - 15 CVEs
- Norton 360 - 14 CVEs
- Norton Ghost - 13 CVEs
- Encryption Desktop - 11 CVEs
- Antivirus Scan Engine - 10 CVEs
- Endpoint Encryption - 10 CVEs
- Message Gateway - 10 CVEs
- Norton Security - 10 CVEs
- Protection Engine - 10 CVEs
- Advanced Threat Protection - 9 CVEs
- Brightmail Antispam - 9 CVEs
- Csapi - 9 CVEs
- Encryption Management Server - 9 CVEs
- Mail Security For Domino - 9 CVEs
- Mail Security For Microsoft Exchange - 9 CVEs
- Protection For Sharepoint Servers - 9 CVEs
- Backupexec System Recovery - 8 CVEs
- Norton Power Eraser - 8 CVEs
- Norton Security With Backup - 8 CVEs
- Sygate Personal Firewall - 8 CVEs
- Data Center Security Server - 7 CVEs
- Endpoint Protection Cloud - 7 CVEs
- Gateway Security - 7 CVEs
- Gateway Security 5400 - 7 CVEs
- Ghost Solutions Suite - 7 CVEs
- Message Gateway For Service Providers - 7 CVEs
- Ngc - 7 CVEs
- Norton Bootable Removal Tool - 7 CVEs
- Pgp Desktop - 7 CVEs
- Velociraptor - 7 CVEs
- Web Security - 7 CVEs
- Altiris Notification Server - 6 CVEs
- Antivirus Central Quarantine Server - 6 CVEs
- Data Center Security - 6 CVEs
- Firewall Vpn Appliance 100 - 6 CVEs
- Firewall Vpn Appliance 200 - 6 CVEs
- Firewall Vpn Appliance 200r - 6 CVEs
- Im Manager - 6 CVEs
- Norton Antispam - 6 CVEs
- Norton App Lock - 6 CVEs
- Raptor Firewall - 6 CVEs
- System Center - 6 CVEs
- Web Gateway Appliance 8450 - 6 CVEs
- Web Gateway Appliance 8490 - 6 CVEs
- Backup Exec - 5 CVEs
- Endpoint Detection And Response - 5 CVEs
- Liveupdate - 5 CVEs
- Liveupdate Administrator - 5 CVEs
- Veritas Storage Foundation - 5 CVEs
- Workspace Streaming - 5 CVEs
- Backup Exec For Windows Server - 4 CVEs
- Clientless Vpn Gateway 4400 - 4 CVEs
- Data Loss Prevention - 4 CVEs
- Discovery - 4 CVEs
- Enterprise Security Manager - 4 CVEs
- Message Filter - 4 CVEs
- Norton Password Manager - 4 CVEs
- Pgp Universal Server - 4 CVEs
- Security Information Manager - 4 CVEs
- Altiris Client Management Suite Pcanywhere Solution - 3 CVEs
- Altiris Deployment Solution Remote Pcanywhere Solution - 3 CVEs
- Automated Support Assistant - 3 CVEs
- Client Firewall - 3 CVEs
- Data Loss Prevention Detection Servers - 3 CVEs
- Data Loss Prevention Endpoint Agents - 3 CVEs
- Gateway Security 360 - 3 CVEs
- Gateway Security 5000 Series - 3 CVEs
- Gateway Security 5300 - 3 CVEs
- It Management Suite - 3 CVEs
- Livestate Recovery - 3 CVEs
- Mail Security Appliance - 3 CVEs
- Nexland Isb Soho Firewall Appliance - 3 CVEs
- Nexland Pro100 Firewall Appliance - 3 CVEs
- Nexland Pro400 Firewall Appliance - 3 CVEs
- Nexland Pro800 Firewall Appliance - 3 CVEs
- Nexland Pro800turbo Firewall Appliance - 3 CVEs
- Nexland Wavebase Firewall Appliance - 3 CVEs
- Norton Family - 3 CVEs
- Norton Mobile Security - 3 CVEs
- Norton Mobile Security For Android - 3 CVEs
- Norton Save And Recovery - 3 CVEs
- Norton Utilities - 3 CVEs
- Reporter - 3 CVEs
- Reporting Server - 3 CVEs
- Scan Engine - 3 CVEs
- Security Information Manager Appliance - 3 CVEs
- Veritas Backup Exec - 3 CVEs
- Veritas Netbackup Client - 3 CVEs
- Veritas Netbackup Enterprise Server - 3 CVEs
- Veritas Netbackup Server - 3 CVEs
- Workspace Virtualization - 3 CVEs
- Altiris It Management Suite Pcanywhere Solution - 2 CVEs
- Altiris Management Platform - 2 CVEs
- Brightmail Gateway - 2 CVEs
- Brightmail Gateway Appliance - 2 CVEs
- Data Insight - 2 CVEs
- Deployment Solution - 2 CVEs
- Email Security.cloud - 2 CVEs
- Endpoint Protection Cloud Agent - 2 CVEs
- Endpoint Protection For Small Business - 2 CVEs
- Gateway Security 320 - 2 CVEs
- Gateway Security 360r - 2 CVEs
- Ghost Solution Suite - 2 CVEs
- Mail Security 8820 Appliance - 2 CVEs
- Management Center - 2 CVEs
- Management Console - 2 CVEs
- Management Platform - 2 CVEs
- Messaging Gateway For Service Providers - 2 CVEs
- Netbackup Opscenter - 2 CVEs
- Network Access Control - 2 CVEs
- Norton Core Firmware - 2 CVEs
- Protection Center - 2 CVEs
- Proxysg Firmware - 2 CVEs
- Security Analytics - 2 CVEs
- Securityexpressions Audit And Compliance Server - 2 CVEs
- Symantec Antivirus Filtering +for Domino - 2 CVEs
- Symantec Antivirus Filtering Domino Mpe - 2 CVEs
- Symantec Antivirus Network Attached Storage - 2 CVEs
- Symantec Antivirus Scan Engine - 2 CVEs
- Symantec Antivirus Scan Engine Caching - 2 CVEs
- Veritas File System - 2 CVEs
- Veritas Storage Foundation Cluster File System For Oracle Rac - 2 CVEs
- Web Security.cloud - 2 CVEs
- Altiris Climentent Manage Suite Pcanywhere Solution - 1 CVEs
- Altiris It Management Suite - 1 CVEs
- Altiris Wise Package Studio - 1 CVEs
- And Endpoint Protection Cloud Client - 1 CVEs
- Anti-virus Engine - 1 CVEs
- Antivirus Engine - 1 CVEs
- Antivirus Scan Engine For Network Attached Storage - 1 CVEs
- Appstream - 1 CVEs
- Appstream Client - 1 CVEs
- Backup Exec Continuous Protection Server - 1 CVEs
- Backup Exec System Recovery - 1 CVEs
- Brightmail - 1 CVEs
- Brightmail And Messaging Gateway - 1 CVEs
- Brightmail Appliance - 1 CVEs
- Carbon Black Cloud Windows Sensor - 1 CVEs
- Client Intrusion Detection System - 1 CVEs
- Content Analysis - 1 CVEs
- Critical System Protection Csp - 1 CVEs
- Data Loss Prevention Endpoint - 1 CVEs
- Data Loss Prevention Enforce/detection Servers - 1 CVEs
- Endpoint Detection And Response Sedr - 1 CVEs
- Endpoint Protection Center - 1 CVEs
- Endpoint Protection Small Business Edition Cloud - 1 CVEs
- Enforce - 1 CVEs
- Enterprise Vault For File System Archiving - 1 CVEs
- Gateway Security 300 - 1 CVEs
- Gateway Security 400 - 1 CVEs
- Gateway Security 460 - 1 CVEs
- Gateway Security 5100 - 1 CVEs
- Gateway Security 5310 - 1 CVEs
- Host Ids - 1 CVEs
- I-gear - 1 CVEs
- Identity Portal - 1 CVEs
- Im Manager 2007 - 1 CVEs
- Industrial Control System Protection - 1 CVEs
- Inventory - 1 CVEs
- It Analytics - 1 CVEs
- Java - 1 CVEs
- Livestate Agent For Windows - 1 CVEs
- Mail-gear - 1 CVEs
- Mail Threat Defense - 1 CVEs
- Malware Analysis Appliance - 1 CVEs
- Malware Analyzer G2 - 1 CVEs
- Management Agent - 1 CVEs
- Mobile Security - 1 CVEs
- Naveng Driver - 1 CVEs
- Navex15 Driver - 1 CVEs
- Netbackup Appliance - 1 CVEs
- Netbackup Enterprise Server - 1 CVEs
- Netbackup Puredisk - 1 CVEs
- Netbackup Server - 1 CVEs
- Norton Antivirus With Backup - 1 CVEs
- Norton Applock - 1 CVEs
- Norton Download Manager - 1 CVEs
- Norton Internet Security 2008 - 1 CVEs
- Norton Internet Security 2010 - 1 CVEs
- On-demand Agent - 1 CVEs
- On-demand Protection - 1 CVEs
- On Command Ccm - 1 CVEs
- On Command Discovery - 1 CVEs
- On Icommand - 1 CVEs
- Pc Tools Internet Security - 1 CVEs
- Powerquest Deploycenter - 1 CVEs
- Proxyclient - 1 CVEs
- Sav Filter Domino Nt Ports - 1 CVEs
- Sav Filter For Domino Nt - 1 CVEs
- Security Check - 1 CVEs
- Security Check Virus Detection - 1 CVEs
- Server Management Suite - 1 CVEs
- Sonar - 1 CVEs
- Sonar Component - 1 CVEs
- Sygate Management Server - 1 CVEs
- Sygate Network Access Control - 1 CVEs
- Symantec Antivirus Clearswift - 1 CVEs
- Symantec Antivirus Messaging - 1 CVEs
- Symantec Antivirus Microsoft Sharepoint - 1 CVEs
- Symantec Antivirus Ms Isa - 1 CVEs
- Symantec Antivirus Scan Engine Clearswift - 1 CVEs
- Symantec Antivirus Scan Engine For Microsoft Sharepoint - 1 CVEs
- Symantec Antivirus Scan Engine For Ms Isa - 1 CVEs
- Symantec Antivirus Scan Engine Messaging - 1 CVEs
- Symantec Diagnostic Tool - 1 CVEs
- Symantec Endpoint Encryption - 1 CVEs
- Symantec Endpoint Protection - 1 CVEs
- Symantec Endpoint Virtualization - 1 CVEs
- Symantec Mail Security Exchange - 1 CVEs
- Symantec Mail Security For Microsoft Exchange - 1 CVEs
- Symantec Messaging Gateway - 1 CVEs
- Symantec Protection Engine - 1 CVEs
- Symantec Vip Enterprise Gateway - 1 CVEs
- Symav Filter Domino Nt - 1 CVEs
- Symdiag - 1 CVEs
- System Recovery - 1 CVEs
- System Recovery 2011 - 1 CVEs
- System Works - 1 CVEs
- Veritas Application Director - 1 CVEs
- Veritas Cluster Server - 1 CVEs
- Veritas Cluster Server Management Console - 1 CVEs
- Veritas Cluster Server One - 1 CVEs
- Veritas Command Central Enterprise Reporter - 1 CVEs
- Veritas Command Central Storage - 1 CVEs
- Veritas Command Central Storage Change Manager - 1 CVEs
- Veritas Dynamic Multi-pathing - 1 CVEs
- Veritas Micromeasure - 1 CVEs
- Veritas Netbackup Operations Manager - 1 CVEs
- Veritas Netbackup Reporter - 1 CVEs
- Veritas Netbackup Server /enterprise Server - 1 CVEs
- Veritas Storae Foundation - 1 CVEs
- Veritas Storage Foundation Cluster File System - 1 CVEs
- Veritas Storage Foundation For Db2 - 1 CVEs
- Veritas Storage Foundation For High Availability - 1 CVEs
- Veritas Storage Foundation For Oracle - 1 CVEs
- Veritas Storage Foundation For Oracle Real Application Cluster - 1 CVEs
- Veritas Storage Foundation For Sybase - 1 CVEs
- Veritas Storage Foundation For Windows High Availability - 1 CVEs
- Veritas Storage Foundation Manager - 1 CVEs
- Veritas Volume Replicator - 1 CVEs
- Vip - 1 CVEs
- Vip Access Desktop - 1 CVEs
- Vip Access For Desktop - 1 CVEs
- Vip Enterprise Gateway - 1 CVEs
- Vxfs - 1 CVEs
- Web Isolation - 1 CVEs
- Windows Liveupdate - 1 CVEs
- Winfax Pro - 1 CVEs
- Advanced Secure Gateway - 0 CVEs
- Ams - 0 CVEs
- Antivirus Scan Engine Clearswift - 0 CVEs
- Application Service Dashboard - 0 CVEs
- Critical System Protection - 0 CVEs
- Deployment Solution Wise Packager - 0 CVEs
- Epo Plugin - 0 CVEs
- Gateway Security 460r - 0 CVEs
- Gateway Security 5200 - 0 CVEs
- Ghost Console And Standard Tools - 0 CVEs
- Ghost Console Client - 0 CVEs
- I3 Listener Agent - 0 CVEs
- Installation Manager - 0 CVEs
- Intruder Alert - 0 CVEs
- Intruder Alert Manager - 0 CVEs
- Intruder Alert Workstation - 0 CVEs
- Java Liveupdate - 0 CVEs
- License Inventory Agent - 0 CVEs
- Livereg - 0 CVEs
- Livestate - 0 CVEs
- Liveupdate Administration Utility - 0 CVEs
- Liveupdate Lots Manager - 0 CVEs
- Mail Security For Smtp - 0 CVEs
- Netbackup - 0 CVEs
- Netbackup Client - 0 CVEs
- Norton Core - 0 CVEs
- Norton Partitionmagic - 0 CVEs
- Norton Pc Checkup - 0 CVEs
- Norton Security Scan - 0 CVEs
- Opscenter Agent - 0 CVEs
- Password Manager - 0 CVEs
- Pgp Desktop For Windows - 0 CVEs
- Platform And Solutions - 0 CVEs
- Private Branch Exchange - 0 CVEs
- Product Authentication Service - 0 CVEs
- Product Authentication Service Client - 0 CVEs
- Product Authorization Service - 0 CVEs
- Proxysg - 0 CVEs
- Reporting Agents - 0 CVEs
- Sms-smtp-mysql-init - 0 CVEs
- Sms-smtp-tomcat - 0 CVEs
- Sms-smtp-xml Mm - 0 CVEs
- Ssl Visibility - 0 CVEs
- Storage Exec - 0 CVEs
- Unified Logging - 0 CVEs
- Veritas Authentication Service - 0 CVEs
- Veritas Backup Exec Desktop Agent - 0 CVEs
- Veritas Backup Exec For Windows Servers - 0 CVEs
- Veritas Backup Exec License Assessment Tool - 0 CVEs
- Veritas Backup Exec Remote Agent For Windows Servers - 0 CVEs
- Veritas Backup Exec Remote Agent For Windows Systems - 0 CVEs
- Veritas Backup Exec Vss Provider - 0 CVEs
- Veritas Commandcentral - 0 CVEs
- Veritas Dmp Dsm Solution - 0 CVEs
- Veritas Enterprise Administrator - 0 CVEs
- Veritas Enterprise Administrator Agent Framework - 0 CVEs
- Veritas Enterprise Administrator Service - 0 CVEs
- Veritas Gridnode Agent - 0 CVEs
- Veritas Jre Redistribution - 0 CVEs
- Veritas Netbackup - 0 CVEs
- Veritas Netbackup Java - 0 CVEs
- Veritas Operations Manager - 0 CVEs
- Veritas Storage Exec - 0 CVEs
- Veritas Storage Foundation For Windows - 0 CVEs
- Veritas Storage Foundation For Windows Apppack - 0 CVEs
- Veritas Storage Foundation For Windows Ccf Client - 0 CVEs
- Veritas Storage Foundation For Windows Ccf Client Apppack - 0 CVEs
- Veritas Storage Foundation For Windows Ccf Server - 0 CVEs
- Veritas Storage Foundation For Windows Ccf Server Apppack - 0 CVEs
- Veritas Storage Foundation For Windows Device Driver Installation - 0 CVEs
- Veritas Storage Foundation Ha For Windows - 0 CVEs
- Veritas Update - 0 CVEs
- Vrtsaa - 0 CVEs
- Vrtsccg - 0 CVEs
- Vrtsccscmserver - 0 CVEs
- Vrtsjre - 0 CVEs
- Vrtsmh - 0 CVEs
- Vrtsperl - 0 CVEs
- Vrtsscmui - 0 CVEs
- Vrtssfmh - 0 CVEs
- Vrtssmweb - 0 CVEs
- Web Gateway Appliance - 0 CVEs
- Web Security For Microsoft Isa Server - 0 CVEs
- Wise Package Studio - 0 CVEs
- Wxrt Ccf Client Apppack - 0 CVEs
- Wxrt Ccf Server Apppack - 0 CVEs
Newest CVEs of Symantec
- CVE-2026-8501 - CVSS 7.8 (high), 2026-06-01: Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM…
- CVE-2025-34041 - CVSS 10 (critical), 2025-06-24: An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16,…
- CVE-2025-3599 - CVSS 7.5 (high), 2025-04-30: Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which…
- CVE-2024-11035 - CVSS 2.5 (low), 2025-03-05: Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive…
- CVE-2025-0893 - CVSS 7.8 (high), 2025-02-19: Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.
- CVE-2024-23617 - CVSS 9.6 (critical), 2024-01-26: A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this…
- CVE-2024-23613 - CVSS 10 (critical), 2024-01-26: A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can…
- CVE-2024-23615 - CVSS 10 (critical), 2024-01-26: A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to…
- CVE-2024-23616 - CVSS 10 (critical), 2024-01-26: A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability…
- CVE-2024-23614 - CVSS 10 (critical), 2024-01-26: A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to…
- CVE-2023-23958 - CVSS 6.8 (medium), 2023-09-27: Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.
- CVE-2023-23957 - CVSS 5.4 (medium), 2023-09-19: An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
- CVE-2022-25629 - CVSS 5.4 (medium), 2022-12-09: An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the…
- CVE-2022-25630 - CVSS 5.4 (medium), 2022-12-09: An authenticated user can embed malicious content with XSS into the admin group policy page.
- CVE-2022-37015 - CVSS 9.8 (critical), 2022-11-08: Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of…
- CVE-2022-25623 - CVSS 7.8 (high), 2022-03-04: The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SYSTEM level…
- CVE-2021-30642 - CVSS 9.8 (critical), 2021-04-27: An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a…
- CVE-2020-12593 - CVSS 7.5 (high), 2020-11-18: Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could…
- CVE-2020-5839 - CVSS 7.5 (high), 2020-07-08: Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could…
- CVE-2020-5838 - CVSS 4.8 (medium), 2020-05-13: Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can potentially enable…
- CVE-2020-5835 - CVSS 7 (high), 2020-05-11: Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the…
- CVE-2020-5836 - CVSS 7.8 (high), 2020-05-11: Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection…
- CVE-2020-5834 - CVSS 5.3 (medium), 2020-05-11: Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size…
- CVE-2020-5833 - CVSS 3.3 (low), 2020-05-11: Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an…
- CVE-2020-5837 - CVSS 7.8 (high), 2020-05-11: Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to…
- CVE-2019-18376 - CVSS 5.9 (medium), 2020-04-10: A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network…
- CVE-2020-5832 - CVSS 7.8 (high), 2020-04-06: Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of…
- CVE-2012-6277 - CVSS 7.8 (high), 2020-02-21: Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec…
- CVE-2020-5827 - CVSS 3.3 (low), 2020-02-11: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that…
- CVE-2020-5830 - CVSS 3.3 (low), 2020-02-11: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that…
