CVE-2018-18369: symantec corporation norton security Untrusted Search Path
Vulnerability summary
CVE-2018-18369 is a high (CVSS 7.8) Untrusted Search Path vulnerability in symantec corporation norton security. EPSS estimates a 2.38% chance of exploitation in the next 30 days, higher than 83.6% of scored vulnerabilities.
Timeline
- 25-04-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.38%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
0.00 pp
From 2.38% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Symantec4 products
- endpoint_protectionnis-22.15.2.22 | sep-12.1.7484.7002
- endpoint_protection_cloud< 22.16.3
- endpoint_protection_cloud_agent< 3.00.31.2817
- norton_security< 22.16.3
Symantec corporation2 products
- norton securityPrior to 22.16.3
- symantec endpoint protection small business editionPrior to Cloud Agent 3.00.31.2817 | NIS-22.15.2.22 | SEP-12.1.7484.7002
2 vendors · 6 products