CVEvulnerability

CVE-2016-5311

7.8 HIGH Published 2020-01-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-427

Description

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.

Affected configurations

• symantec endpoint protection (< 22.8.0.50) • symantec endpoint protection cloud (< 22.8.0.50) • symantec norton 360 (< 22.7) • symantec norton antivirus (< 22.7) • symantec norton antivirus with backup (< 22.7) • symantec norton family (< 22.7) • symantec norton internet security (< 22.7) • symantec norton security (< 22.7) • symantec norton security with backup (< 22.7)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References