CVE-2015-8156: Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before...

Security readout for executives and security teams

CVE-2015-8156 is a local privilege escalation issue in Symantec Endpoint Encryption 11.x before 11.1.1. A user already on a Windows system could abuse an unquoted service path in EEDService to run a malicious executable with higher privileges. This is not described as remote exploitation. Exposure is likely limited to Windows endpoints running Symantec Endpoint Encryption 11.x earlier than 11.1.1 with EEDService installed. An attacker needs local access or an existing execution foothold on the endpoint. Treat this as a moderate endpoint hardening and patching priority. It requires local access, but compromise could undermine endpoint controls and encryption management on affected systems. Prioritize systems with multiple users, administrative workflows, or sensitive data. Mitigation focus: Upgrade Symantec Endpoint Encryption to 11.1.1 or later where applicable.; Review the Symantec advisory for exact fixed builds and vendor instructions.; Restrict write access to sensitive system-drive locations where possible..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.