What is the CVSS score of CVE-2026-40717?

CVE-2026-40717 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Dell Monitor Driver are affected by CVE-2026-40717?

Dell Monitor Driver contains a local privilege escalation vulnerability allowing users with system access to gain administrator control, enabling complete system compromise and data exposure.. A patch is available.

How to fix or mitigate CVE-2026-40717?

Within 24 hours, inventory all systems running Dell Monitor Driver and identify those deployed in high-risk environments (shared workstations, multi-user labs, contractor access). Within 7 days, deploy the patch from Dell Security Advisory DSA-2026-295 across all identified endpoints, starting with shared or multi-user systems. Within 30 days, complete patch rollout to all remaining in-scope assets and validate remediation using vulnerability scanning tools.

Dell Monitor Driver CVE-2026-40717

EUVD-2026-52396 HIGH

Improper Link Resolution Before File Access (CWE-59)

2026-08-03 dell

GHSA-p6hq-r87w-qv7v

Dell Information Disclosure Monitor Driver

7.8

CVSS 3.1 · NVD

Severity by source

Vendor (dell) PRIMARY

MEDIUM

qualitative

NVD

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local symlink attack requires a low-privileged local session; AC:L because path substitution requires no race once file location is known; full CIA impact from SYSTEM-level access.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Aug 07, 2026 - 15:30 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 07, 2026 - 15:22 vuln.today

cvss_changed

Severity Changed

Aug 07, 2026 - 15:22 NVD

MEDIUM HIGH

CVSS changed

Aug 07, 2026 - 15:22 NVD

6.6 (MEDIUM) 7.8 (HIGH)

Patch available

Aug 03, 2026 - 19:02 EUVD

Analysis Generated

Aug 03, 2026 - 18:18 vuln.today

DescriptionNVD

Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

AnalysisAI

Local privilege escalation in Dell Monitor Driver exploits a symlink (link-following) flaw to allow a low-privileged local attacker to elevate to higher system privileges, achieving full confidentiality, integrity, and availability impact on the host. The vendor has released a patch via Dell Security Advisory DSA-2026-295, and no public exploit code has been identified at time of analysis. EPSS rates exploitation probability at 0.11% (2nd percentile), and SSVC classifies exploitation as none and automatable as no - consistent with the local-only attack vector and the absence of CISA KEV listing.

Technical ContextAI

CWE-59 (Improper Link Resolution Before File Access) describes a class of vulnerability - commonly known as a symlink or link-following attack - where a privileged process resolves a file system path without first verifying whether that path is a symbolic link. In Windows environments, a driver service running with elevated or SYSTEM-level privileges may perform file read, write, or execute operations on predictable paths. If a low-privileged attacker can place a symbolic link at that path before the driver accesses it, the driver follows the link to the attacker-controlled destination, effectively operating on a sensitive file under elevated context. The affected component is cpe:2.3:a:dell:monitor_driver:*:*:*:*:*:*:*:*, Dell's proprietary monitor management driver. This vulnerability class is well-documented in Windows driver software and requires no external communication channel to exploit.

RemediationAI

Apply the patch per Dell Security Advisory DSA-2026-295, available at https://www.dell.com/support/kbdoc/en-us/000481265/dsa-2026-295. Based on EUVD-2026-52396, versions prior to 1.0.0.0 are affected - confirm the precise patched release version from the advisory before deploying, given the version conflict noted between CVE description and EUVD data. If immediate patching is not feasible, restrict interactive local sessions to only trusted administrative accounts on systems running Dell Monitor Driver, as low-privileged local users are the required attacker baseline. Additionally, audit world-writable or user-accessible directories involved in driver file operations and monitor for unexpected symbolic link creation in those paths via endpoint detection tooling. These compensating controls do not eliminate the underlying flaw and carry overhead of monitoring rule maintenance; patching remains the definitive fix.