CVE-2026-3991 — Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint

Description (CNA)

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected (CNA)

Vendor / product	Versions
Broadcom / Data Loss Prevention	unaffected 25.1.00100.60229; unaffected 16.1.00200.60431; unaffected 16.0.20009.60689; unaffected 16.0.10112.60928; unaffected 16.0.00215.62094

CWE

CWE-829

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37306

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.