CVE-2018-18369

Name: CVE-2018-18369
Creator: NVD / NIST
Published: 2019-04-25T17:29:00.317+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.38%

Last modified Jun 17, 2026

CVE-2018-18369 is a vulnerability of currently unknown severity. Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.. EPSS estimates a 2.38% chance of exploitation in the next 30 days.

Description

Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

Metrics

EPSS Probability

2.38%

81.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-426

Affected Software

Vendor	Product	Versions
Symantec	Endpoint Protection	nis-22.15.2.22
Symantec	Endpoint Protection	sep-12.1.7484.7002
Symantec	Endpoint Protection Cloud	< 22.16.3
Symantec	Endpoint Protection Cloud Agent	< 3.00.31.2817
Symantec	Norton Security	< 22.16.3

References

http://www.securityfocus.com/bid/107997Third Party Advisory, VDB Entry
https://support.symantec.com/en_US/article.SYMSA1479.htmlVendor Advisory
http://www.securityfocus.com/bid/107997Third Party Advisory, VDB Entry
https://support.symantec.com/en_US/article.SYMSA1479.htmlVendor Advisory

Timeline

Published: Apr 25, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-18369?

How severe is CVE-2018-18369?

Severity scoring for CVE-2018-18369 is pending analysis. The EPSS model estimates a 2.38% probability of exploitation in the next 30 days.

How do I fix CVE-2018-18369?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-18369?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST