Elevation of Privilege Vulnerability in Symantec Endpoint Protection Software by Broadcom
CVE-2025-13918

6.7MEDIUM

Key Information:

Vendor

Broadcom
Status
Symantec Endpoint Protection Windows Client
Vendor
CVE Published:
28 January 2026

What is CVE-2025-13918?

The vulnerability in Symantec Endpoint Protection allows an attacker to exploit the application and gain elevated access to restricted resources. This security flaw can potentially compromise user data and overall system integrity. It's essential for organizations using affected versions to apply the necessary patches and ensure their security posture remains robust.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Symantec Endpoint Protection Windows Client 14.3.12154.10000

Symantec Endpoint Protection Windows Client 14.3.12167.10000

References

https://support.broadcom.com/web/ecx/support-content-noti...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sandro Poppi
JSON
.