Symantec Data Loss Prevention for Windows endpoints contains an elevation of privilege flaw that allows an attacker to gain higher levels of access than intended. The weakness, identified as CWE-829, can enable a user to perform administrative actions such as modifying protected files, changing system settings, or executing commands that normally require elevated privileges, potentially compromising confidentiality and integrity of protected data.

Broadcom Data Loss Prevention for Windows is affected. Versions released prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15 are vulnerable. Users should verify their installed version against this list and plan for an upgrade to a fixed release.

The vulnerability carries a high severity CVSS score of 7.8. No EPSS score is reported and the CVE is not listed in CISA’s KEV catalog, indicating limited known exploitation activity. Based on the description, it is inferred that the attack likely requires local execution or compromise of a trusted component, after which an attacker could gain system-wide control. The impact remains significant for organizations relying on this product to protect sensitive data.