Symantec Norton Mobile Security vulnerabilities

3 CVEs affecting Symantec Norton Mobile Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6585, published 2020-01-08.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-6585, published 2020-01-08. Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days. A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted…
• CVE-2016-6586, published 2020-01-08. Low severity, CVSS 3.7. EPSS: 1.3% chance of exploitation in the next 30 days. A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add…
• CVE-2016-6587, published 2020-01-08. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain…