Norton Antivirus
76 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Norton Antivirus, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Norton Antivirus CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 1 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 8 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 76 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical11
- High28
- Medium32
- Low5
Latest CVEs
The 15 most recently published vulnerabilities affecting Norton Antivirus.
- CVE-2025-7019Avast antivirus stack overflow when scanning a malformed Office Open XML file5.5
- CVE-2025-7011Avast antivirus heap OOB when scanning a malformed zip file7.8
- CVE-2025-7010Avast antivirus stack overflow when scanning a malformed PDF file5.5
- CVE-2025-7009Avast antivirus heap buffer OOB read when scanning a malformed PE file7.8
- CVE-2025-7008Avast antivirus heap buffer OOB read when scanning a malformed PE file7.8
- CVE-2025-7006Avast antivirus use of stack memory after free when scanning a malformed PE file5.5
- CVE-2025-7005Avast antivirus infinite recursion when scanning a malformed PE file5.5
- CVE-2025-7004Avast antivirus heap buffer OOB write when scanning a malformed PE file7.8
- CVE-2025-10101Avast antivirus heap buffer OOB read when scanning a malformed Mach-O file7.8
- CVE-2016-5311A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint ...7.8
- CVE-2018-12238Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; ...7.8
- CVE-2018-12239Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; ...6.8
- CVE-2016-3644The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (...8.4
- CVE-2016-3646The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (...8.4
- CVE-2016-3645Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec We...9.8
Product grouping is registry-driven, with AI assist and human review. How it works