CVE-2025-13919 – Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client

CVE ID : CVE-2025-13919

Published : Jan. 28, 2026, 4:41 p.m. | 26 minutes ago

Description : Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…