CVE-2025-13918: Elevation of Privileges in Symantec Endpoint Protection Windows Client
Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13918?
CVE-2025-13918 is classified as an Elevation of Privilege vulnerability.
How do I fix CVE-2025-13918?
To mitigate CVE-2025-13918, upgrade Symantec Endpoint Protection to version 14.3 RU10 Patch 1 or later.
What versions of Symantec Endpoint Protection are affected by CVE-2025-13918?
CVE-2025-13918 affects versions prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3.
What are the risks associated with CVE-2025-13918?
The risks of CVE-2025-13918 include potential unauthorized access to system privileges, allowing attackers to execute arbitrary code.
Is there a workaround for CVE-2025-13918?
There are no documented workarounds for CVE-2025-13918; the recommended action is to apply the available updates.