CVE-2026-15380

UNKNOWN 0.0

Local privilege escalation in Symantec ITMS

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3)

Vendor	broadcom
Product	symantec management suite
Ecosystems	Virtualization Networking
Industries	Technology
Published	Jul 17, 2026

Stay Ahead of the Next One

Get instant alerts for broadcom symantec management suite

Be the first to know when new unknown vulnerabilities affecting broadcom symantec management suite are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Broadcom / Symantec Management Suite

8.7.3 8.8 8.8.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.broadcom.com: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37995

Credits

Dhanush Arvind, Intercontinental Exchange (ICE) Information Security (https://www.linkedin.com/in/dagowda)