Symantec Norton Security With Backup vulnerabilities

8 CVEs affecting Symantec Norton Security With Backup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5311, published 2020-01-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2211, published 2016-06-30. High severity, CVSS 7.8. EPSS: 53.4% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3645, published 2016-06-30. Critical severity, CVSS 9.8. EPSS: 24.6% chance of exploitation in the next 30 days. Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-2209, published 2016-06-30. High severity, CVSS 7.3. EPSS: 20.9% chance of exploitation in the next 30 days. Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway;…
CVE-2016-2207, published 2016-06-30. High severity, CVSS 8.4. EPSS: 18.1% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3646, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3644, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-2210, published 2016-06-30. High severity, CVSS 7.3. EPSS: 11.4% chance of exploitation in the next 30 days. Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-5311, published 2020-01-09. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint…