CVE-2026-3991CWE-829

Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint

High · published March 30, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-829 · Inclusion of Functionality from Untrusted Control Sphere
Published
2026-03-30T18:27Z
EPSS history
Timeline
  • 30 MAR 18:27Z
    Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint
    cvelistv5