Uncontrolled search path in Symantec Norton Antivirus, Norton AntiVirus with Backup…
Priority LOW 35CWE-427Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.
Summary
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
Why it matters now
EPSS 0.00714 53rd percentileScored 2026-11-07
Fix Fixed Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360 (Symantec): 22.7Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client (Symantec): 22.8.0.50
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Symantec | Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360 | before 22.7 | 22.7 | Patch available | CNA |
| Symantec | Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client | before 22.8.0.50 | 22.8.0.50 | Patch available | CNA |
- Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360 VendorSymantec Affected before 22.7 Fixed in 22.7 Patch available CNA
- Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client VendorSymantec Affected before 22.8.0.50 Fixed in 22.8.0.50 Patch available CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:* | before 22.8.0.50 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:endpoint_protection_cloud:*:*:*:*:*:*:*:* | before 22.8.0.50 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:norton_360:*:*:*:*:*:*:*:* | before 22.7 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:norton_antivirus:*:*:*:*:*:*:*:* | before 22.7 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:norton_antivirus_with_backup:*:*:*:*:*:*:*:* | before 22.7 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:norton_family:*:*:*:*:*:*:*:* | before 22.7 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:norton_internet_security:*:*:*:*:*:*:*:* | before 22.7 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:norton_security:*:*:*:*:*:*:*:* | before 22.7 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:norton_security_with_backup:*:*:*:*:*:*:*:* | before 22.7 | Vulnerable | Symantec |
- cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:* Versions before 22.8.0.50 Vulnerable ·Symantec
- cpe:2.3:a:symantec:endpoint_protection_cloud:*:*:*:*:*:*:*:* Versions before 22.8.0.50 Vulnerable ·Symantec
- cpe:2.3:a:symantec:norton_360:*:*:*:*:*:*:*:* Versions before 22.7 Vulnerable ·Symantec
- cpe:2.3:a:symantec:norton_antivirus:*:*:*:*:*:*:*:* Versions before 22.7 Vulnerable ·Symantec
- cpe:2.3:a:symantec:norton_antivirus_with_backup:*:*:*:*:*:*:*:* Versions before 22.7 Vulnerable ·Symantec
- cpe:2.3:a:symantec:norton_family:*:*:*:*:*:*:*:* Versions before 22.7 Vulnerable ·Symantec
- cpe:2.3:a:symantec:norton_internet_security:*:*:*:*:*:*:*:* Versions before 22.7 Vulnerable ·Symantec
- cpe:2.3:a:symantec:norton_security:*:*:*:*:*:*:*:* Versions before 22.7 Vulnerable ·Symantec
- cpe:2.3:a:symantec:norton_security_with_backup:*:*:*:*:*:*:*:* Versions before 22.7 Vulnerable ·Symantec
Remediation
- Fix · CNA Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360 (Symantec) Fixed in 22.7
- Fix · CNA Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client (Symantec) Fixed in 22.8.0.50
Timeline
- 2026-10-02 Threatist record created from CVE-2016-5311
- 2026-10-03 Alias added: GHSA-g7qp-85xf-w4q4
References
More Symantec Endpoint Protection vulnerabilities
- TI-2009-01353 The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2)… CVSS 2.0HIGH 10.0
- TI-2009-01354 Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in… CVSS 2.0HIGH 9.3
- TI-2016-02020 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec… CVSS 3.0HIGH 7.8
- TI-2012-01284 The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus… CVSS 2.0MEDIUM 4.3
- TI-2012-01283 The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus… CVSS 2.0MEDIUM 4.3
- TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2016-5311 · CVE Program
- CVE-2016-5311 · NVD
- FIRST EPSS
- GHSA-g7qp-85xf-w4q4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences