Endpoint Protection and EDR
CVE-2026-11626: Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool
CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Symantec Endpoint Protection CleanWipe Removal Tool (MacOS) 16.0 | Not affected |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.