Symantec vulnerabilities
We track 9 vulnerabilities in Symantec products across 8 products. 9 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on June 1, 2026.
Latest Symantec vulnerabilities
- 7.8 High severity
PC Tools Internet Security: Exposed IOCTL with Insufficient Access Control
Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or
- 7.5 High severity
Symantec Endpoint Protection: Time-of-check Time-of-use (TOCTOU) Race Condition
Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.
- 8.8 High severity
Data Loss Prevention: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.
- 9.8 Critical severity
Server Management Suite: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.
- 9.8 Critical severity
Messaging Gateway: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
- 9.8 Critical severity
Messaging Gateway: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
- 9.8 Critical severity
Deployment Solution: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.
- 9.8 Critical severity
Symantec Endpoint Detection and Response: Improper Privilege Management
Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to re
- 8.8 High severity
Symantec Messaging Gateway Remote Code Execution Exploited
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of