CVE Tools
Track your stack

Norton Antivirus

77 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Norton Antivirus, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Norton Antivirus CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Norton Antivirus CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-121
2026-010
2026-020
2026-030
2026-040
2026-050
2026-068
2026-070
2026-080
2026-090
2026-101
2026-110

Severity

How the 77 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1114%
  • High2938%
  • Medium3242%
  • Low56%

Latest CVEs

The 15 most recently published vulnerabilities affecting Norton Antivirus.

  1. CVE-2026-6064Norton, Avast, and AVG local privilege escalation via link following in Data Shredder7.3
  2. CVE-2025-7019Avast antivirus stack overflow when scanning a malformed Office Open XML file5.5
  3. CVE-2025-7011Avast antivirus heap OOB when scanning a malformed zip file7.8
  4. CVE-2025-7010Avast antivirus stack overflow when scanning a malformed PDF file5.5
  5. CVE-2025-7009Avast antivirus heap buffer OOB read when scanning a malformed PE file7.8
  6. CVE-2025-7008Avast antivirus heap buffer OOB read when scanning a malformed PE file7.8
  7. CVE-2025-7006Avast antivirus use of stack memory after free when scanning a malformed PE file5.5
  8. CVE-2025-7005Avast antivirus infinite recursion when scanning a malformed PE file5.5
  9. CVE-2025-7004Avast antivirus heap buffer OOB write when scanning a malformed PE file7.8
  10. CVE-2025-10101Avast antivirus heap buffer OOB read when scanning a malformed Mach-O file7.8
  11. CVE-2016-5311A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint ...7.8
  12. CVE-2018-12239Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; ...6.8
  13. CVE-2018-12238Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; ...7.8
  14. CVE-2016-3646The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (...8.4
  15. CVE-2016-3645Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec We...9.8

Product grouping is registry-driven, with AI assist and human review. How it works