VULNERABILITY INTELLIGENCE

CVE-2025-3599

CVSS score6.5 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.

Weakness classification

  • secure@symantec.com: CWE-367
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references