Command Update vulnerabilities

14 known vulnerabilities in Command Update from Dell. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Dell Command Update (DCU): Missing Authorization

  CVE-2026-58565Aug 19, 2026Dell

  Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

• 7.8 High severity

  Dell Command Update (DCU): Incorrect Default Permissions

  CVE-2026-58564Aug 19, 2026Dell

  Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

• 7.3 High severity

  Dell Command Update (DCU): Missing Authorization

  CVE-2026-58562Aug 19, 2026Dell

  Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

• 7.3 High severity

  Dell Command Update (DCU): Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-56797Aug 19, 2026Dell

  Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

• 7.8 High severity

  Dell Command Update (DCU): Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-53477Aug 19, 2026Dell

  Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

• 7.8 High severity

  Dell Command Update (DCU): Deserialization of Untrusted Data

  CVE-2026-49817Aug 19, 2026Dell

  Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

• 7.8 High severity

  Dell Command Update (DCU): Deserialization of Untrusted Data

  CVE-2026-49816Aug 19, 2026Dell

  Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

• 7.5 High severity

  Dell Update (DU): Externally Controlled Reference to a Resource in Another Sphere

  CVE-2024-28962Aug 6, 2024Dell

  Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o

• 7.3 High severity

  Dell Command Update (DCU): Improper Link Resolution Before File Access

  CVE-2023-28065Jun 23, 2023Dell

  Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation

• 7.1 High severity

  Dell Command Update (DCU): Improper Link Resolution Before File Access

  CVE-2023-28071Jun 23, 2023Dell

  Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder

• 7.8 High severity

  SupportAssist Client Consumer: Improper Privilege Management

  CVE-2022-34384Feb 11, 2023Dell

  Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advan

• 7.1 High severity

  Dell Command Update (DCU): Insecure Operation on Windows Junction / Mount Point

  CVE-2023-23698Feb 10, 2023Dell

  Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file dele

• 7.8 High severity

  Dell Command Update (DCU): Improper Verification of Cryptographic Signature

  CVE-2022-34459Feb 1, 2023Dell

  Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicio

• 7.8 High severity

  Dell Command Update (DCU): Uncontrolled Search Path Element

  CVE-2022-24426Apr 1, 2022Dell

  Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escal