CVE-2019-9695

Severity: medium (CVSS 6.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-29 · updated 2026-06-17

Description

Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machine or in a target process. Note that this exploit is only possible with direct physical access to the device.

Affected products

Norton Core: before 278 — fixed in 278

How to fix

Upgrade to a fixed version: Norton Core 278. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/107478
https://support.symantec.com/en_US/article.SYMSA1476.html
http://www.securityfocus.com/bid/107478
https://support.symantec.com/en_US/article.SYMSA1476.html

Get alerted when CVE-2019-9695 or the next vulnerability affects your stack