Search/CVE-2016-2207
● CVE — High

CVE-2016-2207

VendorsymantecProductnorton 360, endpoint protection, norton power eraser, norton antivirus, norton security, message gateway, norton internet security, norton security with backup, protection engine, advanced threat protection, csapi, data center security server, mail security for domino, mail security for microsoft exchange, message gateway for service providers, ngc, norton bootable removal tool, protection for sharepoint serversDiscoveredJun 30, 2016UpdatedMay 6, 2026

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4…

View graph Watch Export
CVSS v3.1
8.4 HIGH
EPSS
18.1%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 23, 2026
● 0.00pp
18.1% → 18.1% over 9 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
19 relationships
Timeline
disclosure → media coverage
Jun 30, 2016
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026