Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-01-27 | 1 | Patch1 |
| 2026-01-28 | 2 | Disclosure1Patch1 |
SEPで権限昇格とCOMハイジャックの脆弱性 CVE-2025-13918 CVE-2025-13919 Symantec Endpoint Protection Security Update https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36774
Post summary
Symantec Endpoint Protection (SEP) is affected by CVE-2025-13918 and CVE-2025-13919, which enable privilege escalation and COM hijacking; a security update is available to remediate the issues.
CVE-2025-13919 COM Hijacking Vulnerability in Symantec Endpoint Protection Before 14.3 ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13919 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces a newly disclosed vulnerability (CVE‑2025‑13919) in Symantec Endpoint Protection but does not provide technical details, proof of concept, exploit code, or active exploitation claims.
CVE-2025-13919 Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue … https://www.cve.org/CVERecord?id=CVE-2025-13919
Post summary
CVE-2025-13919 is linked to a COM Hijacking vulnerability in older Symantec Endpoint Protection releases; patches 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3 are referenced as mitigation measures.