PatchTheCVEsymantec pgp encryption vulnerabilities and fixes
Recent CVEs affecting symantec pgp encryption, with upgrade or downgrade steps. 2 tracked.
Also searched as: symantecpgpencryption.
symantec pgp encryption has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-11. Highest priority: CVE-2025-8660 (score 45/100).
- CVE-2025-8661 MEDIUM 6.1 DOWNGRADE A stored Cross-Site Scripting vulnerability (XSS) occurs when the server does not properly validate or encode
- CVE-2025-8660 CRITICAL 9.8 DOWNGRADE Privilege escalation occurs when a user gets access to more resources or functionality than they are normally
FAQ
How do I fix symantec pgp encryption vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is symantec pgp encryption being exploited right now?
None of the tracked symantec pgp encryption CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which symantec pgp encryption CVE should I patch first?
CVE-2025-8660 currently ranks highest (45/100): Privilege escalation occurs when a user gets access to more resources or functionality than they are normally .