Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2018-18366

Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type of issue where a specially crafted IRP request can cause the driver to return uninitialized memory.

  • Published: Apr 25, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-18366
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
symantec / endpoint_protection sep-12.1.7484.7002 sep-12.1.7484.7002.x
symantec / endpoint_protection nis-22.15.2.22 nis-22.15.2.22.x
symantec / endpoint_protection_cloud - 22.16.3
symantec / norton_security - 22.16.3
symantec / endpoint_protection 14.2-mp1 14.2-mp1.x
symantec / endpoint_protection 14.2 14.2.x
symantec / endpoint_protection 14.0.1-mp1 14.0.1-mp1.x
symantec / endpoint_protection 14.0.1-mp2 14.0.1-mp2.x
symantec / endpoint_protection 14.0.1 14.0.1.x
symantec / endpoint_protection 14.0.0-mp2 14.0.0-mp2.x
symantec / endpoint_protection 14-mp1 14-mp1.x
symantec / endpoint_protection 14 14.x
symantec / endpoint_protection 12.1-ru6-mp10 12.1-ru6-mp10.x
symantec / endpoint_protection 12.1-ru1 12.1-ru1.x
symantec / endpoint_protection 12.1-ru1-mp1 12.1-ru1-mp1.x
symantec / endpoint_protection 12.1-ru2 12.1-ru2.x
symantec / endpoint_protection 12.1-ru2-mp1 12.1-ru2-mp1.x
symantec / endpoint_protection 12.1-ru3 12.1-ru3.x
symantec / endpoint_protection 12.1-ru4 12.1-ru4.x
symantec / endpoint_protection 12.1-ru4-mp1 12.1-ru4-mp1.x
symantec / endpoint_protection 12.1-ru4-mp1a 12.1-ru4-mp1a.x
symantec / endpoint_protection 12.1-ru4-mp1b 12.1-ru4-mp1b.x
symantec / endpoint_protection 12.1-ru4a 12.1-ru4a.x
symantec / endpoint_protection 12.1-ru5 12.1-ru5.x
symantec / endpoint_protection 12.1-ru6 12.1-ru6.x
symantec / endpoint_protection 12.1-ru6-mp1 12.1-ru6-mp1.x
symantec / endpoint_protection 12.1-ru6-mp2 12.1-ru6-mp2.x
symantec / endpoint_protection 12.1-ru6-mp3 12.1-ru6-mp3.x
symantec / endpoint_protection 12.1-ru6-mp4 12.1-ru6-mp4.x
symantec / endpoint_protection 12.1-ru6-mp5 12.1-ru6-mp5.x
symantec / endpoint_protection 12.1-ru6-mp6 12.1-ru6-mp6.x
symantec / endpoint_protection 12.1-ru6-mp7 12.1-ru6-mp7.x
symantec / endpoint_protection 12.1-ru6-mp8 12.1-ru6-mp8.x
symantec / endpoint_protection 12.1 12.1.x
symantec / endpoint_protection 11.0-mr1 11.0-mr1.x
symantec / endpoint_protection 11.0-mr2 11.0-mr2.x
symantec / endpoint_protection 11.0-mr3 11.0-mr3.x
symantec / endpoint_protection 11.0-mr4 11.0-mr4.x
symantec / endpoint_protection 11.0-mr4-mp2 11.0-mr4-mp2.x
symantec / endpoint_protection 11.0-ru5 11.0-ru5.x
symantec / endpoint_protection 11.0-ru6 11.0-ru6.x
symantec / endpoint_protection 11.0-ru6-mp1 11.0-ru6-mp1.x
symantec / endpoint_protection 11.0-ru6-mp2 11.0-ru6-mp2.x
symantec / endpoint_protection 11.0-ru6-mp3 11.0-ru6-mp3.x
symantec / endpoint_protection 11.0-ru6a 11.0-ru6a.x
symantec / endpoint_protection 11.0-ru7 11.0-ru7.x
symantec / endpoint_protection 11.0-ru7-mp1 11.0-ru7-mp1.x
symantec / endpoint_protection 11.0-ru7-mp2 11.0-ru7-mp2.x
symantec / endpoint_protection 11.0-ry7-mp3 11.0-ry7-mp3.x
symantec / endpoint_protection 11.0-ru7-mp4 11.0-ru7-mp4.x
symantec / endpoint_protection 11.0-ru7-mp4a 11.0-ru7-mp4a.x
symantec / endpoint_protection 11.0 11.0.x
symantec / endpoint_protection_cloud_agent - 3.00.31.2817