CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with...
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
- Record
CVE-2016-5311- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-427
- Updated
- 2026-11-02
CVE List No score
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
- Record
CVE-2016-5311- Updated
- 2026-11-02
EUVDEUVD-2016-6262 No score
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
- Record
EUVD-2016-6262- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g7qp-85xf-w4q4 No score
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with...
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
- Record
GHSA-g7qp-85xf-w4q4- Updated
- 2026-11-02
Affected products
- symantec endpoint protection small business edition cloud, and endpoint protection cloud client
- symantec endpoint protection
- symantec endpoint protection cloud
- symantec norton antivirus, norton antivirus with backup, norton security, norton security with backup, norton internet security, norton 360
- symantec norton 360
- symantec norton antivirus
- symantec norton antivirus with backup
- symantec norton internet security
- symantec norton security
- symantec norton security with backup
- symantec norton family
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-5311 is a high vulnerability (CVSS 7.8) in Symantec Endpoint Protection Small Business Edition Cloud, And Endpoint Protection Cloud Client, published January 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.
References
securityfocus.com/bid/94295
securitytracker.com/id/1037323
symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117_00
nvd.nist.gov/vuln/detail/CVE-2016-5311
github.com/advisories/GHSA-g7qp-85xf-w4q4