symantec norton internet security

Name: symantec norton internet security
Brand: symantec

productUS

cpe:2.3:a:symantec:norton_internet_security:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical20high14medium5low

updated 2026-10-28

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2007-1689US	high10.0	65.0% (99th)	Exploit	no fix	2007-05-16	= 2004
CVE-2016-3645US	critical9.8	24.6% (98th)	Exploit	no fix	2016-06-30	—
CVE-2016-2209US	high7.3	20.9% (98th)	Exploit	no fix	2016-06-30	—
CVE-2016-2207US	high8.4	18.1% (97th)	Exploit	no fix	2016-06-30	—
CVE-2016-3646US	high8.4	17.7% (97th)	Exploit	no fix	2016-06-30	—
CVE-2016-3644US	high8.4	17.7% (97th)	Exploit	no fix	2016-06-30	—
CVE-2016-2210US	high7.3	11.4% (96th)	Exploit	no fix	2016-06-30	—
CVE-2004-0445US	low2.6	11.0% (96th)	Exploit	no fix	2004-07-07	3 versions
CVE-2004-0375US	medium5.0	8.83% (95th)	Exploit	no fix	2004-08-18	2 versions
CVE-2003-1149US	medium4.3	2.08% (81st)	Exploit	no fix	2003-10-27	= 2003_6.0.4.34
CVE-2007-1793US	medium4.9	1.72% (77th)	Exploit	no fix	2007-04-02	5 versions
CVE-2006-4855US	medium4.9	1.32% (71st)	Exploit	no fix	2006-09-19	5 versions
CVE-2007-3673US	medium6.9	1.06% (64th)	Exploit	no fix	2007-07-15	2 versions
CVE-2007-1476US	low1.9	0.89% (59th)	Exploit	no fix	2007-03-16	2 versions
CVE-2016-2211US	high7.8	53.4% (99th)	—	no fix	2016-06-30	—
CVE-2005-0249US	high7.5	18.8% (97th)	—	no fix	2005-02-08	= 2004
CVE-2002-1695US	medium5.0OT elevated	13.6% (96th)	—	no fix	2002-12-31	= 2001
CVE-2004-0444US	high10.0	12.8% (96th)	—	no fix	2004-07-07	3 versions
CVE-2006-6490US	high10.0	10.4% (96th)	—	no fix	2007-02-22	= 2006
CVE-2010-0107US	high9.3	6.53% (94th)	—	no fix	2010-02-23	3 versions
CVE-2006-5403US	medium5.1	6.30% (94th)	—	no fix	2006-10-19	= 2006
CVE-2008-0312US	high9.3	6.15% (93rd)	—	no fix	2008-04-08	3 versions
CVE-2007-0447US	high9.3	5.96% (93rd)	—	no fix	2007-10-05	4 versions
CVE-2008-0313US	medium6.8	4.03% (91st)	—	no fix	2008-04-08	3 versions
CVE-2007-2955US	medium6.8	4.03% (91st)	—	no fix	2007-08-09	2 versions
CVE-2007-3699US	high9.3	3.91% (90th)	—	no fix	2007-10-05	4 versions
CVE-2006-3456US	high8.5	3.86% (90th)	—	no fix	2007-05-11	2 versions
CVE-2004-0364US	high7.5	3.73% (90th)	—	no fix	2004-04-15	= 2004
CVE-2002-0663US	high7.5	3.25% (88th)	—	no fix	2002-07-26	= 2001
CVE-2005-0922US	medium5.0	2.87% (87th)	—	no fix	2005-05-02	2 versions
CVE-2006-5404US	low2.6	2.60% (85th)	—	no fix	2006-10-19	= 2006
CVE-2009-1428US	medium4.3	2.33% (83rd)	—	no fix	2009-04-29	5 versions
CVE-2009-3104US	medium4.3	2.20% (82nd)	—	no fix	2009-09-08	4 versions
CVE-2005-1346US	low2.6	1.49% (74th)	—	no fix	2005-05-02	= 2005_contains_nav_11.0.0
CVE-2016-5311US	high7.8	0.71% (54th)	—	22.7	2020-01-09	< 22.7
CVE-2005-0923US	low2.1	0.45% (39th)	—	no fix	2005-05-02	2 versions
CVE-2003-0994US	high7.2	0.41% (35th)	—	no fix	2004-02-03	4 versions
CVE-2006-1836US	medium6.8	0.39% (33rd)	—	no fix	2006-04-19	= 3.0
CVE-2007-5047US	high7.2	0.33% (26th)	—	no fix	2007-09-24	= 2008_15.0.0.60
CVE-2007-5829US	medium6.0	0.31% (24th)	—	no fix	2007-11-05	= 3.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation14 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer9 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-264CWE-2643 CVEs
CWE-284Improper Access Control3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-399CWE-3992 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan