CVE-2002-1540: The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6...

Security readout for executives and security teams

This is an old local privilege escalation in Symantec Norton AntiVirus Corporate Edition clients. A user already on an affected workstation could abuse how the client starts Windows Help with elevated privileges to gain higher rights. Exposure is likely limited to legacy Windows endpoints still running the named Symantec corporate antivirus client versions. Modern environments are unlikely affected unless old images, isolated systems, or unmanaged legacy workstations remain in service. Treat as a legacy hygiene issue unless the affected product is still deployed. Prioritize discovery in old endpoint fleets, lab networks, and long-lived Windows systems, then upgrade or retire affected clients. Mitigation focus: Inventory endpoints for the named Symantec client versions.; Upgrade beyond 7.5.1 Build 62 or 7.6.1 Build 35a.; Retire unsupported legacy antivirus clients where upgrades are unavailable..

Prepared

Jun 30, 2026, 03:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.