Read the docs
TI-2019-07094 Aliases CVE-2019-9695GHSA-v6v7-6hh8-q5rg

Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which…

Priority LOW 31Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machine or in a target process. Note that this exploit is only possible with direct physical access to the device.

Why it matters now

EPSS 0.00642 51st percentileScored 2026-11-07
Fix Fixed Norton Core (Norton): v278

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NortonNorton Corebefore v278v278Patch availableCNA
  • Norton Core VendorNorton Affected before v278 Fixed in v278 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:symantec:norton_core_firmware:*:*:*:*:*:*:*:*before 278VulnerableSymantec
cpe:2.3:h:symantec:norton_core:-:*:*:*:*:*:*:*not specified by NVDRunning onSymantec
  • cpe:2.3:o:symantec:norton_core_firmware:*:*:*:*:*:*:*:* Versions before 278 Vulnerable ·Symantec
  • cpe:2.3:h:symantec:norton_core:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Symantec

Remediation

  • Fix · CNA Norton Core (Norton) Fixed in v278

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-9695
  2. 2026-10-03 Alias added: GHSA-v6v7-6hh8-q5rg
  3. 2026-10-21 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2024-12956 Time-of-check time-of-use race condition in Norton Utilities Ultimate CVSS 3.1HIGH 7.8
  • TI-2019-14090 Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation… CVSS 3.1HIGH 7.8
  • TI-2022-03932 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation CVSS 3.1HIGH 7.8
  • TI-2017-09954 Code injection in Symantec Norton Remove & Reinstall CVSS 3.0HIGH 7.0
  • TI-2019-14088 Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information… CVSS 3.1MEDIUM 6.5
  • TI-2019-14087 Origin validation error in Norton Password Manager CVSS 3.1MEDIUM 6.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences