Elevation of Privilege Vulnerability in Symantec Endpoint Protection Software by Broadcom
CVE-2025-13918

6.7MEDIUM

Key Information:

Vendor

Broadcom
Status
Symantec Endpoint Protection Windows Client
Vendor
CVE Published:
28 January 2026

What is CVE-2025-13918?

The vulnerability in Symantec Endpoint Protection allows an attacker to exploit the application and gain elevated access to restricted resources. This security flaw can potentially compromise user data and overall system integrity. It's essential for organizations using affected versions to apply the necessary patches and ensure their security posture remains robust.

Affected Version(s)

Symantec Endpoint Protection Windows Client 14.3.12154.10000

Symantec Endpoint Protection Windows Client 14.3.12167.10000

References

https://support.broadcom.com/web/ecx/support-content-noti...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sandro Poppi
.