CVE-2020-5837: Symantec Endpoint Protection

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.

Affected products

• Symantec Endpoint Protection: before 14.3 (fixed in 14.3)

Published 2020-05-11. Last modified 2026-06-17.