CVE-2026-3991 Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...

CVE-2026-3991

CVE-2026-3991 affects Symantec Data Loss Prevention Windows Endpoint prior to: 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15. The issue is described as an Elevation of Privilege , allowing a local attacker to obtain elevated access to protected resources. The provided doc...

Broadcom Symantec Data Loss Prevention Windows Endpoint 安全漏洞

Broadcom Symantec Data Loss Prevention Windows Endpoint is a terminal data leakage prevention security software developed by Broadcom Corporation. There is a security vulnerability in Broadcom Symantec Data Loss Prevention Windows Endpoint, which stems from an privilege escalation vulnerability...

CVE-2026-3991: Inclusion of Functionality from Untrusted Control Sphere

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...

EUVD-2015-1620

Malware in sbrugna...

EUVD-2014-9055

Malware in sbrugna...

EUVD-2024-21111

Malicious code in bioql PyPI...

CVE-2024-23617

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution...

Symantec Data Loss Prevention Security Breach

Symantec Data Loss Prevention DLP is a set of data leakage prevention solutions from Symantec Symantec. The product is primarily used to discover, monitor, and protect sensitive data, among other things. A security vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and prior...

CVE-2024-23617 Symantec Data Loss Prevention Buffer Overflow

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution...

PT-2024-19972 · Symantec · Symantec Data Loss Prevention

Name of the Vulnerable Software and Affected Versions: Symantec Data Loss Prevention versions 14.0.2 and earlier Description: A buffer overflow issue exists, allowing a remote, unauthenticated attacker to exploit it by enticing a user to open a crafted document, which can lead to code execution...

CVE-2024-23617: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution...

CVE-2012-6277

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention DLP before 11.6.1, IBM Notes...

Symantec Data Loss Prevention Enforce Server Cross-Site Scripting Vulnerability

Symantec Data Loss Prevention DLP is a data leakage protection solution from Symantec Symantec. The program provides data leakage protection management and reporting and other functions. A cross-site scripting vulnerability exists in the management console in Enforce Server in Symantec DLP versio...

Symantec Data Loss Prevention Enforce Server Cross-Site Request Forgery Vulnerability

Symantec Data Loss Prevention DLP is a data leakage protection solution from Symantec Symantec. The program provides data leakage protection management and reporting and other functions. A cross-site request forgery vulnerability exists in the management console in Enforce Server in Symantec DLP...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to hijack the authentication of administrators...

CVE-2014-9230

Cross-site scripting XSS vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1485

Cross-site request forgery CSRF vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to hijack the authentication of administrators...

CVE-2014-9230: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1485: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to hijack the authentication of administrators...