Riskcovery

CVE-2018-18366

State
Published
Severity
Not scored
Published
Apr 25, 2019
Updated
Aug 5, 2024
Reserved
Oct 15, 2018

Read the record on cve.org

Description

Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type of issue where a specially crafted IRP request can cause the driver to return uninitialized memory.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Norton SecuritySymantec Corporation
  • Prior to 22.16.3Affected
SEP (Windows client)Symantec Corporation
  • Prior to and including 12.1 RU6 MP9Affected
  • Prior to 14.2 RU1Affected
SEP SBESymantec Corporation
  • Prior to Cloud Agent 3.00.31.2817Affected
  • NIS-22.15.2.22Affected
  • SEP-12.1.7484.7002Affected
SEP CloudSymantec Corporation
  • Prior to 22.16.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.