CVE-2026-46733
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Dell Display and Peripheral Manager (DDPM) for Windows versions prior to 2.3 contain an Improper Access Control vulnerability. A low-privileged attacker with local access could exploit this to achieve code execution.
Risk Assessment
The risk involves potential privilege escalation and system compromise by an attacker with local access, leading to data theft or malware installation.
Recommendation
Immediately update Dell Display and Peripheral Manager to version 2.3 or later. Restrict local access to workstations to trusted users only.
Other vulnerabilities in Dell Display and Peripheral Manager
See all- CVE-2026-59917High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59916High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59914High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-46731High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59913High
Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 lacks authentication for critical functions. A local attacker with low privileges can elevate their privileges.
- CVE-2026-59912High
Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 has improper access control. A local attacker with low privileges can elevate privileges and execute arbitrary code.
- CVE-2026-46734High
Dell Display and Peripheral Manager (DDPM Mac) versions prior to 2.3 contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
- CVE-2026-46732Medium
Dell Display and Peripheral Manager (DDPM) for macOS versions prior to 2.3 contain a Race Condition vulnerability due to concurrent execution using a shared resource without proper synchronization. A low-privileged attacker with local access could potentially exploit this vulnerability to achieve Elevation of Privileges.
Original NVD description (English source)
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.