Encryption Desktop
Vendor:
First CVE: Feb 18, 2013 · Active for 13 years
11
Total CVEs
More Total CVEs than 89% of tracked products
2.8
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
5.2
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Encryption Desktop over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 18, 2013
13 years ago
Most Recent CVE
Jan 8, 2020
2,389 days ago
CVE Severity & Scoring
Encryption Desktop11 CVEs
18%
73%
9%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local1 (9.1%)
Network1 (9.1%)
Unknown7 (63.6%)
Physical0 (0.0%)
Adjacent Network2 (18.2%)
Attack Complexity
Low3 (27.3%)
High1 (9.1%)
Unknown7 (63.6%)
User Interaction
None3 (27.3%)
Unknown7 (63.6%)
Required1 (9.1%)
Privileges Required
Low2 (18.2%)
High1 (9.1%)
None1 (9.1%)
Unknown7 (63.6%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-6590HIGH A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symante | Jan 8, 2020 | 7.8 | 26 | NO | NO |
CVE-2012-6533MEDIUM Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a craft | Feb 18, 2013 | 4.4 | 26 | NO | YES |
CVE-2012-4351MEDIUM Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application. | Feb 18, 2013 | 6.9 | 23 | NO | NO |
CVE-2017-6330MEDIUM Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests." | Sep 13, 2017 | 6.5 | 21 | NO | NO |
CVE-2017-13682MEDIUM In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocatio | Oct 23, 2017 | 5.7 | 20 | NO | NO |
CVE-2013-1610MEDIUM Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain | Aug 5, 2013 | 6.8 | 18 | NO | NO |
CVE-2017-13679MEDIUM A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to its | Oct 10, 2017 | 4.2 | 17 | NO | NO |
CVE-2014-3436MEDIUM Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumpti | Aug 22, 2014 | 5.0 | 15 | NO | NO |
CVE-2014-3431MEDIUM Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to by | Jun 21, 2014 | 4.3 | 14 | NO | NO |
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to c | Apr 23, 2014 | 2.6 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
9.1% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Encryption Desktop
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 10.3.2 | 4 | 3.8 | 0.6% | 0 | 0 |
| 10.3.1 | 4 | 3.6 | 0.7% | 0 | 0 |
| 10.3.0 | 7 | 4.7 | 0.5% | 0 | 1 |