PT-2026-29098 · Symantec · Symantec Data Loss Prevention Windows Endpoint

Manuel Feifel · CVE-2026-3991 · Published 2026-03-30 · Updated 2026-04-02

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Data Loss Prevention Windows Endpoint versions prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15.

Description The software may be susceptible to an Elevation of Privilege issue, allowing an attacker to gain elevated access to normally protected resources. The issue involves a hardcoded OpenSSL configuration path, potentially enabling an attacker to obtain a SYSTEM shell directly within the DLP process.

Recommendations Update to a version prior to 25.1 MP1. Update to a version prior to 16.1 MP2. Update to a version prior to 16.0 RU2 HF9. Update to a version prior to 16.0 RU1 MP1 HF12. Update to a version prior to 16.0 MP2 HF15.

Fix

LPE

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2026-3991

Affected Products

Symantec Data Loss Prevention Windows Endpoint

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-3991 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37306 · Vendor Advisory
• https://twitter.com/autumn_good_35/status/2038999381895172298 · Twitter Post
• https://twitter.com/threatcluster/status/2039613867349647568 · Twitter Post
• https://twitter.com/syedaquib77/status/2039577339676315737 · Twitter Post
• https://twitter.com/CVEnew/status/2038916107176993100 · Twitter Post
• https://twitter.com/InfoGuard_Labs/status/2039292950593585294 · Twitter Post
• https://twitter.com/syedaquib77/status/2039600349661593723 · Twitter Post
• https://twitter.com/syedaquib77/status/2039584781889916988 · Twitter Post
• https://twitter.com/f1tym1/status/2039611094746923475 · Twitter Post