CVE-2026-46732
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Dell Display and Peripheral Manager (DDPM) for macOS versions prior to 2.3 contain a Race Condition vulnerability due to concurrent execution using a shared resource without proper synchronization. A low-privileged attacker with local access could potentially exploit this vulnerability to achieve Elevation of Privileges.
Risk Assessment
The risk involves potential privilege escalation by a local attacker, which could lead to unauthorized access to sensitive data or system compromise.
Recommendation
It is recommended to immediately update Dell Display and Peripheral Manager to version 2.3 or later, which addresses this vulnerability.
Other vulnerabilities in Dell Display and Peripheral Manager
See all- CVE-2026-59917High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59916High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59914High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-46731High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59913High
Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 lacks authentication for critical functions. A local attacker with low privileges can elevate their privileges.
- CVE-2026-59912High
Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 has improper access control. A local attacker with low privileges can elevate privileges and execute arbitrary code.
- CVE-2026-46734High
Dell Display and Peripheral Manager (DDPM Mac) versions prior to 2.3 contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
- CVE-2026-46733High
Dell Display and Peripheral Manager (DDPM) for Windows versions prior to 2.3 contain an Improper Access Control vulnerability. A low-privileged attacker with local access could exploit this to achieve code execution.
Original NVD description (English source)
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.