Symantec Encryption Desktop — known CVE vulnerabilities

Every CVE whose affected-product data names Symantec Encryption Desktop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2016-6590 — CVSS 7.8 (high): A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0…
• CVE-2012-4351 — CVSS 6.9 (medium): Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges…
• CVE-2013-1610 — CVSS 6.8 (medium): Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop…
• CVE-2017-6330 — CVSS 6.5 (medium): Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted…
• CVE-2017-13682 — CVSS 5.7 (medium): In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer…
• CVE-2014-3436 — CVSS 5.0 (medium): Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a…
• CVE-2012-6533 — CVSS 4.4 (medium): Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows…
• CVE-2014-3431 — CVSS 4.3 (medium): Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for…
• CVE-2017-13679 — CVSS 4.2 (medium): A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular…
• CVE-2014-1646 — CVSS 2.6 (low): Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory…
• CVE-2014-1647 — CVSS 2.6 (low): Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data…