CVE-2018-18369: Symantec Endpoint Protection

High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

Affected products

• Symantec Endpoint Protection: version nis-22.15.2.22 only; version sep-12.1.7484.7002 only
• Symantec Endpoint Protection Cloud: before 22.16.3 (fixed in 22.16.3)
• Symantec Endpoint Protection Cloud Agent: before 3.00.31.2817 (fixed in 3.00.31.2817)
• Symantec Norton Security: before 22.16.3 (fixed in 22.16.3)

Published 2019-04-25. Last modified 2026-06-17.