← Back

CVE-2025-3599

nvd nist
Published: Apr 30, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.

Affected (1)

Broadcom
1 product
Symantec Eraser Engine
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Symantec Eraser Engine
Before 119.1.7.8
Running on/withPlatform Versions
Broadcom
Symantec Endpoint Protection
All versions

Related CWEs

CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (1)

Source: secure@symantec.com
Vendor Advisory

Timeline

No history available yet.