CVE-2026-59913
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 lacks authentication for critical functions. A local attacker with low privileges can elevate their privileges.
Risk Assessment
An attacker with local access to the workstation can gain unauthorized access to administrative functions, potentially leading to privilege escalation and further attacks.
Recommendation
Update Dell Display and Peripheral Manager to version 2.3.0.1005 or later. Restrict local access to workstations.
Other vulnerabilities in Dell Display and Peripheral Manager
See all- CVE-2026-59917High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59916High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59914High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-46731High
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
- CVE-2026-59912High
Dell Display and Peripheral Manager (DDPM) for macOS before version 2.3.0.1005 has improper access control. A local attacker with low privileges can elevate privileges and execute arbitrary code.
- CVE-2026-46734High
Dell Display and Peripheral Manager (DDPM Mac) versions prior to 2.3 contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
- CVE-2026-46733High
Dell Display and Peripheral Manager (DDPM) for Windows versions prior to 2.3 contain an Improper Access Control vulnerability. A low-privileged attacker with local access could exploit this to achieve code execution.
- CVE-2026-46732Medium
Dell Display and Peripheral Manager (DDPM) for macOS versions prior to 2.3 contain a Race Condition vulnerability due to concurrent execution using a shared resource without proper synchronization. A low-privileged attacker with local access could potentially exploit this vulnerability to achieve Elevation of Privileges.
Original NVD description (English source)
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.