What’s Vulnerable › Vulnerabilities
CVE-2025-3599: Symantec Endpoint Protection Elevation of Privilege
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-04-30 · updated 2026-06-17
- Weakness: CWE-367
Description
Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.
Affected products
- Broadcom Symantec Eraser Engine: before 119.1.7.8 — fixed in 119.1.7.8
How to fix
Upgrade to a fixed version: Broadcom Symantec Eraser Engine 119.1.7.8. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-3599 or the next vulnerability affects your stack