A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security wi…

published 2020-01-09 6 y ago modified 2026-06-17 4 mo ago also EUVD-2016-6262

cvss: 7.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.7%; EPSS 0.7% chance of exploitation in 30 days, percentile 53%
public exploits: 0; none known

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.

Patch / fix

fixed in 9

symantec endpoint_protection 22.8.0.50
symantec endpoint_protection_cloud 22.8.0.50
symantec norton_360 22.7
symantec norton_antivirus 22.7
symantec norton_antivirus_with_backup 22.7
symantec norton_family 22.7
symantec norton_internet_security 22.7
symantec norton_security 22.7
symantec norton_security_with_backup 22.7

Exploit prediction

0.71% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD	2.0	6.9	AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360
Symantec Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client

Classification

Weakness

CWE-427 Uncontrolled Search Path Element

References

symantec.com /security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117
vendor-advisory
securityfocus.com /bid/94295
third-party-advisory, vdb-entry
securitytracker.com /id/1037323
third-party-advisory, vdb-entry
securitytracker.com /id/1037324
third-party-advisory, vdb-entry
securitytracker.com /id/1037325
third-party-advisory, vdb-entry

Sources

CVE List CVE-2016-5311
NVD CVE-2016-5311

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary