CVE-2016-6590 json
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF…
published 2020-01-08 6 y ago modified 2026-06-17 4 mo ago also EUVD-2016-7508
- cvss
- 7.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 24%
- public exploits
- 0
- none known
Summary
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
Patch / fix
- symantec encryption_desktop 10.4.1
- symantec endpoint_encryption 7.6
Exploit prediction
0.32% chance of exploitation in the next 30 days, higher than 24% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- Symantec IT Management Suite
- Symantec Ghost Solution Suite
- Symantec Symantec Endpoint Virtualization
- Symantec Encryption Desktop
Classification
- Weakness
-
- CWE-269 Improper Privilege Management
References
-
support.symantec.com
/us/en/article.symsa1385.html
vendor-advisory
-
securityfocus.com
/bid/94279
third-party-advisory, vdb-entry
-
securitytracker.com
/id/1037302
third-party-advisory, vdb-entry
Sources
- CVE List CVE-2016-6590
- NVD CVE-2016-6590
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.