CVE-2026-3991

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3991", "assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "state": "PUBLISHED", "assignerShortName": "symantec", "dateReserved": "2026-03-11T16:47:38.735Z", "datePublished": "2026-03-30T18:27:31.430Z", "dateUpdated": "2026-03-31T13:49:39.341Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "shortName": "symantec", "dateUpdated": "2026-03-30T18:27:31.430Z"}, "title": "Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint", "datePublic": "2026-03-30T19:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-829", "description": "CWE-829 Inclusion of functionality from untrusted control sphere", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "affected": [{"vendor": "Broadcom", "product": "Data Loss Prevention", "platforms": ["Windows"], "versions": [{"status": "unaffected", "version": "25.1.00100.60229"}, {"status": "unaffected", "version": "16.1.00200.60431"}, {"status": "unaffected", "version": "16.0.20009.60689"}, {"status": "unaffected", "version": "16.0.10112.60928"}, {"status": "unaffected", "version": "16.0.00215.62094"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user."}]}], "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37306", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Manuel Feifel", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-31T03:55:43.418048Z", "id": "CVE-2026-3991", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-31T13:49:39.341Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3991", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-31T03:55:43.418048Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-31T13:48:12.915Z"}}], "cna": {"title": "Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Manuel Feifel"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Broadcom", "product": "Data Loss Prevention", "versions": [{"status": "unaffected", "version": "25.1.00100.60229"}, {"status": "unaffected", "version": "16.1.00200.60431"}, {"status": "unaffected", "version": "16.0.20009.60689"}, {"status": "unaffected", "version": "16.0.10112.60928"}, {"status": "unaffected", "version": "16.0.00215.62094"}], "platforms": ["Windows"], "defaultStatus": "affected"}], "datePublic": "2026-03-30T19:00:00.000Z", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37306", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.", "supportingMedia": [{"type": "text/html", "value": "Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-829", "description": "CWE-829 Inclusion of functionality from untrusted control sphere"}]}], "providerMetadata": {"orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "shortName": "symantec", "dateUpdated": "2026-03-30T18:27:31.430Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3991", "state": "PUBLISHED", "dateUpdated": "2026-03-31T13:49:39.341Z", "dateReserved": "2026-03-11T16:47:38.735Z", "assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "datePublished": "2026-03-30T18:27:31.430Z", "assignerShortName": "symantec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "platforms": ["Windows"], "product": "Data Loss Prevention", "vendor": "Broadcom", "versions": [{"status": "unaffected", "version": "25.1.00100.60229"}, {"status": "unaffected", "version": "16.1.00200.60431"}, {"status": "unaffected", "version": "16.0.20009.60689"}, {"status": "unaffected", "version": "16.0.10112.60928"}, {"status": "unaffected", "version": "16.0.00215.62094"}]}], "source": "secure@symantec.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user."}, {"lang": "es", "value": "Symantec Data Loss Prevention Windows Endpoint, anterior a 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12 y 16.0 MP2 HF15, puede ser susceptible a una vulnerabilidad de Elevaci\u00f3n de Privilegios, que es un tipo de problema mediante el cual un atacante puede intentar comprometer la aplicaci\u00f3n de software para obtener acceso elevado a recursos que normalmente est\u00e1n protegidos de una aplicaci\u00f3n o usuario."}], "id": "CVE-2026-3991", "lastModified": "2026-06-17T10:44:34.970", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "secure@symantec.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3991", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-31T03:55:43.418048Z", "version": "2.0.3"}}]}, "published": "2026-03-30T19:16:27.207", "references": [{"source": "secure@symantec.com", "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37306"}], "sourceIdentifier": "secure@symantec.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-829"}], "source": "secure@symantec.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["Windows"], "status": "unaffected", "versions": {"scheme": "generic", "value": "25.1.00100.60229"}}, {"platform": ["Windows"], "status": "unaffected", "versions": {"scheme": "generic", "value": "16.1.00200.60431"}}, {"platform": ["Windows"], "status": "unaffected", "versions": {"scheme": "generic", "value": "16.0.20009.60689"}}, {"platform": ["Windows"], "status": "unaffected", "versions": {"scheme": "generic", "value": "16.0.10112.60928"}}, {"platform": ["Windows"], "status": "unaffected", "versions": {"scheme": "generic", "value": "16.0.00215.62094"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "data_loss_prevention", "vendor": "broadcom"}], "analysis": {"en": {"generated_at": "2026-03-30T20:51:51.775882+00:00", "value": {"mitigation_remediation": ["Apply the latest version that includes the fix, at least 25.1 MP1 for the 25.x branch or the latest update for the 16.x branch.", "Verify the patch by checking the installed product version and re\u2011scanning for vulnerabilities to confirm resolution.", "If immediate patching is not possible, monitor for updates and schedule the upgrade as soon as feasible."], "summary": {"action": "Apply Patch", "impact": "Privilege Escalation"}, "threat_synthesis": {"affected_systems": "Broadcom Data Loss Prevention for Windows is affected. Versions released prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15 are vulnerable. Users should verify their installed version against this list and plan for an upgrade to a fixed release.", "description_and_impact": "Symantec Data Loss Prevention for Windows endpoints contains an elevation of privilege flaw that allows an attacker to gain higher levels of access than intended. The weakness, identified as CWE-829, can enable a user to perform administrative actions such as modifying protected files, changing system settings, or executing commands that normally require elevated privileges, potentially compromising confidentiality and integrity of protected data.", "risk_and_exploitability": "The vulnerability carries a high severity CVSS score of 7.8. No EPSS score is reported and the CVE is not listed in CISA\u2019s KEV catalog, indicating limited known exploitation activity. Based on the description, it is inferred that the attack likely requires local execution or compromise of a trusted component, after which an attacker could gain system-wide control. The impact remains significant for organizations relying on this product to protect sensitive data."}}}}, "created": "2026-03-30T20:55:15.888441+00:00", "updated": "2026-04-03T09:11:10.661419+00:00", "vendors": ["broadcom", "broadcom$PRODUCT$data_loss_prevention"]}