CVE-2018-5239: Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit.

Security readout for executives and security teams

Norton App Lock versions before 1.3.0.332 could be bypassed, letting someone circumvent the app’s locking function and gain device access. The issue matters where the app was relied on to restrict access to sensitive apps or device content. Exposure is limited to Android environments using Norton App Lock before v1.3.0.332. Risk is highest on shared, managed, lost, or physically accessible devices where this app was treated as an access-control layer. Treat this as a targeted mobile control weakness, not an internet-scale emergency. Prioritize if the organization used Norton App Lock to protect corporate apps, shared devices, or regulated data. Mitigation focus: Update Norton App Lock to v1.3.0.332 or later where available.; Check Symantec/Norton guidance for any additional remediation advice.; Do not rely on app-lock software as the only protection for sensitive data..

Prepared

Jun 7, 2026, 13:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.