is SEP affected by vulnerabilities CVE-2025-13918 and CVE-2025-13919?

Products

• Endpoint Security Complete
• Endpoint Protection

Issue/Introduction

You would like to know if SEP is affected by these vulnerabilities. 

Environment

Both SEP client managed by SEPM on-prem, and SESC.

Resolution

SEP client version prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3 are affected by both these CVEs. 

The following client updates have been made available to remediate these issues:

• SEP 14.3 RU10 (14.3.12167.10000)
• SEP 14.3 RU9 (14.3.11237.9000)
• SEP 14.3 RU8 (14.3.10178.8000)

 

More details can be found in this official Security Update published by Broadcom.