HIGH🇵🇱 Wersja polska

CVE-2019-3744

CVSS 7.8v3.1pub. 2019-08-09upd. 2024-11-21

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal exploit in order to run a malicious executable with elevated privileges.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Dell Digital Delivery

    APP
    Dell
    < 3.5.20134.0.15.0 – 4.0.41 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path TraversalLPERace Condition
CWE
References

Related vulnerabilities

CVE-2025-38739HIGH7.2ten sam produkt

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerabili...

CVE-2024-0155HIGH7.0ten sam produkt

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileg...

CVE-2024-0156HIGH7.0ten sam produkt

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privile...

CVE-2020-5342HIGH7.8ten sam produkt

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A loc...

CVE-2019-3742HIGH7.8ten sam produkt

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A loc...