CVE-2026-3991— Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint
Quick assessment
Affected
Broadcom Data Loss Prevention
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Broadcom Symantec Data Loss Prevention Windows Endpoint是美国博通（Broadcom）公司的一款终端数据防泄漏安全软件。 Broadcom Symantec Data Loss Prevention Windows Endpoint存在安全漏洞，该漏洞源于权限提升漏洞，可能导致攻击者获取提升的访问权限。以下版本受到影响：25.1 MP1之前版本、16.1 MP2之前版本、16.0 RU2 HF9之前版本、16.0 RU1 MP1 HF12之前版本和16
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-3991
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
从非可信控制范围包含功能例程
Source: CVE Program / CVE List V5
Vulnerability Title
Broadcom Symantec Data Loss Prevention Windows Endpoint 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Broadcom Symantec Data Loss Prevention Windows Endpoint是美国博通（Broadcom）公司的一款终端数据防泄漏安全软件。 Broadcom Symantec Data Loss Prevention Windows Endpoint存在安全漏洞，该漏洞源于权限提升漏洞，可能导致攻击者获取提升的访问权限。以下版本受到影响：25.1 MP1之前版本、16.1 MP2之前版本、16.0 RU2 HF9之前版本、16.0 RU1 MP1 HF12之前版本和16
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Broadcom | Data Loss Prevention | 25.1.00100.60229 | - |
|
II. Public POCs for CVE-2026-3991
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-3991
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-3991 (1)
IV. Related Vulnerabilities
Same vendor: Broadcom
-
CVE-2026-15380
Local privilege escalation in Symantec ITMS -
CVE-2026-15379
Arbitrary File Read as SYSTEM in Symantec ITMS -
CVE-2026-11626
Local Privilege Escalation in Symantec Endpoint Protection m -
CVE-2026-11815
Insecure Deserialization via MITM in Layer 7 Policy Manager -
CVE-2026-8370
Automic Automation Agent Unix privilege escalation
Same weakness: CWE-829
-
CVE-2026-100256
CVE-2026-100256 -
CVE-2026-97150
baserCMS5 BcAddonMigrator任意文件读取删除漏洞 -
CVE-2026-87114
Kube-compare: container:// reference extraction runs the ima -
CVE-2026-54160
Network UPS Tools: A PWN Request in make-dist workflow can e -
CVE-2026-95985
Kiro IDE Allows Agentic Writes to Global Configurations Whil
V. Comments for CVE-2026-3991
No comments yet