Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary…
Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access…
CVSS 3.1HIGH 7.8·Local·Low privileges·No interaction·EPSS 0.00389·Published 2020-01-14·Fixed in 5.3.0.67
Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain eleva…
Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machi…
CVSS 3.0MEDIUM 6.8·Physical·No auth·No interaction·EPSS 0.00642·Published 2019-03-29·Fixed in v278
Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not expli…
CVSS 3.1MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.00874·Published 2019-12-05·Fixed in 6.6.2.5
Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing (CORS) vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another…
CVSS 3.1MEDIUM 6.3·Network·Low privileges·No interaction·EPSS 0.0034·Published 2019-12-05·Fixed in 6.6.2.5CWE-346
Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing (CORS) vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another…
CVSS 3.1MEDIUM 6.3·Network·Low privileges·No interaction·EPSS 0.0034·Published 2019-12-05·Fixed in 6.6.2.5CWE-346
Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured certificate binds the public key of an attack…