Update vulnerabilities

6 known vulnerabilities in Update from Dell. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Dell Update (DU): Externally Controlled Reference to a Resource in Another Sphere

  CVE-2024-28962Aug 6, 2024Dell

  Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o

• 7.3 High severity

  Dell Command Update (DCU): Improper Link Resolution Before File Access

  CVE-2023-28065Jun 23, 2023Dell

  Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation

• 7.1 High severity

  Dell Command Update (DCU): Improper Link Resolution Before File Access

  CVE-2023-28071Jun 23, 2023Dell

  Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder

• 7.8 High severity

  SupportAssist Client Consumer: Improper Privilege Management

  CVE-2022-34384Feb 11, 2023Dell

  Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advan

• 7.8 High severity

  Dell Command Update (DCU): Improper Verification of Cryptographic Signature

  CVE-2022-34459Feb 1, 2023Dell

  Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicio

• 7.8 High severity

  Dell Command Update (DCU): Uncontrolled Search Path Element

  CVE-2022-24426Apr 1, 2022Dell

  Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escal