Medium severity6.5NVD Advisory· Published Apr 30, 2025· Updated Jun 17, 2026

CVE-2025-3599

Description

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Symantec Eraser Engine
cpe:2.3:a:broadcom:symantec_eraser_engine:*:*:*:*:*:*:*:*
Range: <119.1.7.8
Symantec/Endpoint Protection Windows Agentllm-create
Range: <119.1.7.8
Broadcom Corporation/Endpoint Protection Windows Agentllm-create
Range: <119.1.7.8
Symantec/Endpoint Protectioncpe-rescue
Range: 119.1.7.8

Patches

Vulnerability mechanics

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25659nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000