CVE-2026-15380 — Local privilege escalation in Symantec ITMS

CVE-2026-15380

Local privilege escalation in Symantec ITMS PUBLISHED

Description (CNA)

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3)

Affected (CNA)

Vendor / product	Versions
Broadcom / Symantec Management Suite	affected before SMA_SMP_8_8_PF_v13 and SMA_SMP_8_8_1_PF_v5

CWE

No CWE identifiers supplied.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37995

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.