VULNERABILITY INTELLIGENCE
CVE-2016-5311
CVSS score7.8 HIGH
EPSS probability0.71%
CISA KEVNot currently listed
Published2020-01-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
Weakness classification
- CWE-427: Uncontrolled Search Path Element
Primary references
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory