CVE-2016-2208

—

CVSS 3.0

9.1 critical

EPSS

19%p97

Published

May 19, 2016 (May 19, 2016)

Modified

Jun 17, 2026

Description

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation and system crash) via a malformed PE header file.

Vendors: symantec
Products: anti-virus engine
Weakness: CWE-399
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (19.2%)

In the news0 stories

No ingested article mentions this CVE yet.