CVE-2025-3599

MEDIUM6.5/ 10.0
Share:
Published: April 30, 2025 at 05:15 PM
Modified: June 17, 2026 at 09:20 AM
Source: secure@symantec.com

Vulnerability Description

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.

CVSS Metrics

Base Score
6.5
Severity
MEDIUM
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

Source: secure@symantec.com
NVD-CWE-noinfo
Source: nvd@nist.gov