CVE-2026-34883: Improper Link Resolution Before File Access

An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low-privileged user to escalate privileges to Administrator. During installation, the software writes the file CCFLFamily07Feb11.edr t...

CVE-2025-53398

The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,...

CVE-2025-53398

The Portrait Dell Color Management application (version 3.3.8 ) for Dell monitors is affected by a vulnerability involving Insecure Permissions . Specifically, the software creates a temporary folder with improperly set permissions when a custom installation path is utilized. This flaw can be exp...

PT-2025-51843

Name of the Vulnerable Software and Affected Versions Portrait Dell Color Management application version 3.3.8 Description The Portrait Dell Color Management application for Dell monitors exhibits Insecure Permissions. Recommendations At the moment, there is no information about a newer version...

CVE-2025-53919

An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installation and uninstallation. A low-privileged attacker with local access could potentially exploit this, leading to elevati...

CVE-2025-53398

The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,...

CVE-2025-53398

The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,...

CVE-2025-53398: Incorrect Default Permissions

The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,...

CVE-2025-53919: Incorrect Default Permissions

An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installation and uninstallation. A low-privileged attacker with local access could potentially exploit this, leading to elevati...