{"schemaVersion":3,"id":"CVE-2016-5311","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.","dates":{"published":"2020-01-09T19:30:52.000Z","modified":"2024-08-06T01:00:58.618Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.9,"severity":"medium","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00714,"percentile":0.52843,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00714},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00714,"percentile":0.52843}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00714,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00714,"percentile":0.52843}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-427","name":"Uncontrolled Search Path Element","description":"The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/427.html"}],"affected":[{"vendor":"symantec","product":"endpoint_protection","name":"endpoint protection","label":"endpoint_protection","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.8.0.50","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.8.0.50","eol":null,"hubHref":"/vendor/symantec/endpoint_protection"},{"vendor":"symantec","product":"endpoint_protection_cloud","name":"endpoint protection cloud","label":"endpoint_protection_cloud","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.8.0.50","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.8.0.50","eol":null,"hubHref":"/vendor/symantec/endpoint_protection_cloud"},{"vendor":"symantec","product":"endpoint protection small business edition cloud, and endpoint protection cloud client","name":"Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client","label":"endpoint protection small business edition cloud, and endpoint protection cloud client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.8.0.50","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.8.0.50","eol":null,"hubHref":"/vendor/symantec/endpoint_protection_small_business_edition_cloud_and_endpoint_protection_cloud_client"},{"vendor":"symantec","product":"norton_360","name":"norton 360","label":"norton_360","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_360"},{"vendor":"symantec","product":"norton_antivirus","name":"norton antivirus","label":"norton_antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_antivirus"},{"vendor":"symantec","product":"norton antivirus, norton antivirus with backup, norton security, norton security with backup, norton internet security, norton 360","name":"Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360","label":"norton antivirus, norton antivirus with backup, norton security, norton security with backup, norton internet security, norton 360","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_antivirus_norton_antivirus_with_backup_norton_security_norton_security_with_backup_norton_internet_security_norton_360"},{"vendor":"symantec","product":"norton_antivirus_with_backup","name":"norton antivirus with backup","label":"norton_antivirus_with_backup","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_antivirus_with_backup"},{"vendor":"symantec","product":"norton_family","name":"norton family","label":"norton_family","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_family"},{"vendor":"symantec","product":"norton_internet_security","name":"norton internet security","label":"norton_internet_security","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_internet_security"},{"vendor":"symantec","product":"norton_security","name":"norton security","label":"norton_security","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_security"},{"vendor":"symantec","product":"norton_security_with_backup","name":"norton security with backup","label":"norton_security_with_backup","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.7","eol":null,"hubHref":"/vendor/symantec/norton_security_with_backup"}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/94295","label":"www.securityfocus.com/bid/94295","hostname":"www.securityfocus.com","tags":["X Refsource MISC","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037323","label":"www.securitytracker.com/id/1037323","hostname":"www.securitytracker.com","tags":["X Refsource MISC","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037324","label":"www.securitytracker.com/id/1037324","hostname":"www.securitytracker.com","tags":["X Refsource MISC","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037325","label":"www.securitytracker.com/id/1037325","hostname":"www.securitytracker.com","tags":["X Refsource MISC","Third Party Advisory","VDB Entry"]},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117_00","label":"www.symantec.com/security_response/…","hostname":"www.symantec.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-01-09T19:30:52.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T01:00:58.618Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:11:43.658Z","stale":false,"partial":false}}