CVE-2025-3599: Symantec Endpoint Protection Elevation of Privilege
First published: Wed Apr 30 2025(Updated: )
Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Endpoint Protection | <119.1.7.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-3599?
CVE-2025-3599 is classified as an Elevation of Privilege vulnerability, which can potentially allow unauthorized deletion of protected resources.
How do I fix CVE-2025-3599?
To mitigate CVE-2025-3599, update the Symantec Endpoint Protection Windows Agent to version 119.1.7.8 or later.
Who is affected by CVE-2025-3599?
CVE-2025-3599 affects users of the Symantec Endpoint Protection Windows Agent running versions prior to 119.1.7.8.
What can an attacker do using CVE-2025-3599?
An attacker exploiting CVE-2025-3599 can delete resources that are typically safeguarded against unauthorized access.
Is there a workaround for CVE-2025-3599?
While upgrading to the latest version is the recommended solution, temporarily restricting access to vulnerable components may serve as a workaround.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/symantec
- canonical/symantec endpoint protection