Local Privilege Escalation in CleanWipe Removal Tool for macOS by Broadcom
CVE-2026-11626

5.4MEDIUM

Key Information:

Vendor

Broadcom
Status
Symantec Endpoint Protection Cleanwipe Removal Tool
Vendor
CVE Published:
10 June 2026

What is CVE-2026-11626?

The CleanWipe Removal Tool for macOS, versions prior to 16.0.0.65, is vulnerable to a Local Privilege Escalation issue. This vulnerability can allow an attacker who already has limited access to the system to escalate their privileges, potentially gaining administrative control. This can lead to unauthorized access to sensitive information or system resources, highlighting the necessity for users to upgrade to a patched version to mitigate these risks.

Affected Version(s)

Symantec Endpoint Protection CleanWipe Removal Tool MacOS 16.0.0.65

References

https://support.broadcom.com/web/ecx/support-content-noti...
vendor-advisory

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kun Peeks (@SwayZGl1tZyyy)
.