CVE-2026-15380

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3)

Score

CVSS 4.0 5.1 Medium

Status

Awaiting Analysis - secure@symantec.com

Published

2026-07-17

Last modified

2026-10-24

Weaknesses

CWE-269

Affected products

• Symantec Management Suite (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37995