Symantec DLP Agent Flaw Exposed Systems to Privilege Escalation Attacks

A high-severity local privilege escalation (CVE-2026-3991, CVSS 7.8) in the Symantec DLP Agent allows a low-privileged user to gain SYSTEM by creating a hardcoded build-path and supplying a malicious OpenSSL configuration file and DLL; Broadcom released patches (e.g., DLP 25.1 MP1, 16.1 MP2) on March 30, 2026 and administrators should apply the updates to remediate the issue.