Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-15380

Local privilege escalation in Symantec ITMS

Description

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Broadcom Symantec Management Suite

Default version status: unaffected

  • before SMA_SMP_8_8_PF_v13 and SMA_SMP_8_8_1_PF_v5affected

References