CVE-2016-6585: A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, whic...

Security readout for executives and security teams

CVE-2016-6585 is a denial-of-service issue in Symantec Norton Mobile Security for Android before version 3.16. A remote attacker positioned for man-in-the-middle activity could use specially crafted JavaScript to disrupt the app. The bundle does not show data theft, device takeover, CVSS scoring, or active exploitation. Exposure is limited to Android devices still running Norton Mobile Security versions earlier than 3.16. Modern fleets are likely unaffected if the app has been updated or retired, but legacy unmanaged Android devices should be checked. Treat this as a targeted legacy mobile exposure issue, not an enterprise-wide emergency based on the bundle. Confirm whether affected Android app versions still exist, then remediate or retire them through normal mobile device management. Mitigation focus: Inventory Android devices for Norton Mobile Security installations.; Update affected installations to version 3.16 or later where available.; Check current Symantec or Broadcom guidance for supported remediation..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.