Local privilege escalation in Symantec ITMS

Description

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3)

Affected Products

Vendor	Product	Versions
broadcom	symantec management suite	before SMA_SMP_8_8_PF_v13 and SMA_SMP_8_8_1_PF_v5

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37995(vendor-advisory)

Related News (1 articles)

Tier C

VulDB72d ago

CVE-2026-15380 | Broadcom Symantec Management Suite 8.7.3/8.8/8.8.1 Task Scheduler Local Privilege Escalation

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.0 NONE

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37995

PublishedJul 17, 2026

Last enriched72d agov2

Trending Score0

Source articles1

Independent1

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

Version History

Last enriched 72d ago

v2Tier C72d ago

Updated severity from NONE to CRITICAL based on 'very critical' rating; assigned CVSS estimate of 9.0 and CWE-269 (Improper Access Control / Privilege Management)

severitycvssEstimatecweIds

via VulDB

v172d ago

Initial creation

Local privilege escalation in Symantec ITMS

Description

Affected Products

References

Related News (1 articles)

Discussion (0)

Community Vote

Related CVEs (5)

Pin to Dashboard

Verification

Vulnerability Timeline

Version History