CVE-2022-24426

CVE-2022-24426 affects Dell Command Update, Dell Update, and Alienware Update (versions around 4.4.0) with a Local Privilege Escalation in the Advanced Driver Restore component. A local attacker could escalate privileges, per the NVD entry. Connected sources corroborate the impact and indicate th...

CVE-2022-34458

The CVE-2022-34458 entry covers Dell Command | Update, Dell Update, and Alienware Update (

CVE-2022-34459

CVE-2022-34459 concerns three Dell update products: Dell Command | Update, Dell Update, and Alienware Update, all versions prior to 4.7 . The flaw is an improper verification of cryptographic signatures in the function Get Applicable Driver Component, enabling a local attacker to potentially exec...

CVE-2022-34384

Dell SupportAssist Client (Consumer 3.11.1 and earlier) and SupportAssist Client Commercial (3.2 and earlier), Dell Command | Update, Dell Update, and Alienware Update (before 4.5) contain a Local Privilege Escalation vulnerability in the Advanced Driver Restore component. A local attacker could ...

CVE-2019-3750

CVE-2019-3750 affects Dell Command Update versions prior to 3.1. The issue arises from insecure handling of Temp permissions, enabling a locally authenticated, low-privilege attacker to delete arbitrary files by creating a symlink from Temp\IC\ICDebugLog.txt to a target file. Impact: arbitrary fi...

CVE-2022-34382

Dell CVE-2022-34382 affects Dell Command Update, Dell Update and Alienware Update up to version 4.6.0. The flaw is a Local Privilege Escalation in the custom catalog configuration that could allow a local attacker to elevate privileges. Public sources corroborate the affected software and state t...

CVE-2019-3749

Dell Command Update (pre-3.1) is affected by an Arbitrary File Deletion vulnerability. A local authenticated attacker can delete arbitrary files by exploiting a symlink from Temp\ICProgress\Dell_InventoryCollector_Progress.xml to a target file, due to incorrect permissions on the Temp directory. ...

CVE-2023-23698

Dell Command | Update, Dell Update, and Alienware Update prior to 4.6.0 and 4.7.1 are affected. The installer component performs an insecure operation on Windows Junction, allowing a local attacker to delete arbitrary files without user interaction. Impact: high for availability/integrity; exploi...

CVE-2024-28962

Dell Command | Update, Dell Update, and Alienware Update UWP are affected by an Exposed Dangerous Method or Function vulnerability in versions prior to 5.4, enabling unauthenticated remote DoS. The issue is documented across CVE-2024-28962/NVD and ancillary sources with no exploit details provide...

CVE-2026-56796

Dell Command Update versions prior to 5.7.1 contain a Link Following (CWE-59) vulnerability. A low-privileged local attacker can exploit it to achieve Elevation of Privileges. Dell's DSA-2026-309 advisory provides the fix. No in-the-wild exploitation has been reported. Upgrade to version 5.7.1. h...

CVE-2023-28065

Dell Command | Update, Dell Update, and Alienware Update (Windows) have versions 4.8.0 and earlier affected by an Insecure Operation on Windows Junction / Mount Point vulnerability. The root cause is an insecure operation involving Windows junctions/mount points, allowing a local attacker to esca...

CVE-2026-49816

Dell Command Update (DCU) versions prior to 5.7.1 contain a Deserialization of Untrusted Data vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7....

CVE-2023-28071

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point that could allow a local attacker to create arbitrary folders, leading to permanent Denial of Service. Exploitation is described as local, with no...

CVE-2026-58565

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...

CVE-2026-49817

Dell Command Update (DCU) versions prior to 5.7.1 are affected by a Deserialization of Untrusted Data vulnerability. A low-privileged local attacker can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). The at...

CVE-2026-58562

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access and user interaction could exploit this to gain unauthorized access to the system. The CVSS 3.1 score is 7.3 (HIGH) with vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/...

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

CVE-2026-67268

Dell Command Update (DCU) versions prior to 5.7.1 contain an Improper Restriction of XML External Entity Reference (XXE) vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve elevation of privileges and server-side request forgery (SSRF) . The CVSS 3.1 base s...

CVE-2026-58564

Dell Command Update (DCU) versions prior to 5.7.1 ship with overly permissive default file permissions. A low-privileged local attacker can leverage this to access the filesystem, achieving high confidentiality, integrity, and availability impact (CVSS 7.8). Remediation is to upgrade DCU to versi...

CVE-2026-67266

Dell Command Update (DCU) versions prior to 5.7.1 contain an Incorrect Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve elevation of privileges , resulting in high integrity impact with no effect on confidentiality or availability. The CVSS...

CVE-2026-67267

Dell Command Update (DCU) versions prior to 5.7.1 are affected by an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve information disclosure , with no user interaction required. T...