Vulnerability Details CVE-2018-18369
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.4%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
Products affected by CVE-2018-18369
-
cpe:2.3:a:symantec:endpoint_protection:nis-22.15.2.22
-
cpe:2.3:a:symantec:endpoint_protection:sep-12.1.7484.7002
-
cpe:2.3:a:symantec:endpoint_protection_cloud:*
-
cpe:2.3:a:symantec:endpoint_protection_cloud_agent:*
-
cpe:2.3:a:symantec:norton_security:*