CVE-2018-5236

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-20 · updated 2026-06-17
Weakness: CWE-362

Description

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events.

Affected products

Symantec Endpoint Protection: through 14.0; 12.1-ru6mp10, 14.0-ru1mp1

References

http://www.securityfocus.com/bid/104198
http://www.securitytracker.com/id/1041180
https://support.symantec.com/en_US/article.SYMSA1454.html
http://www.securityfocus.com/bid/104198
http://www.securitytracker.com/id/1041180
https://support.symantec.com/en_US/article.SYMSA1454.html

Get alerted when CVE-2018-5236 or the next vulnerability affects your stack