CVE-2018-5237: Symantec Endpoint Protection

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.

Affected products

• Symantec Endpoint Protection: up to and including 14.0; version 12.1 only; version 14.0 only

Published 2018-06-20. Last modified 2026-06-17.