Symantec Norton Utilities vulnerabilities

3 CVEs affecting Symantec Norton Utilities, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5235, published 2018-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-1999-1380, published 1997-05-04. Medium severity, CVSS 5.1. EPSS: 1.8% chance of exploitation in the next 30 days. Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through…
CVE-2006-1836, published 2006-04-19. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a…
CVE-2018-5235, published 2018-08-22. Medium severity, CVSS 6.0. EPSS: 0.4% chance of exploitation in the next 30 days. Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an…