What is the CVSS score of CVE-2026-46733?

CVE-2026-46733 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Dell Display Manager are affected by CVE-2026-46733?

Dell Display and Peripheral Manager (DDPM) versions prior to 2.3 contain a local privilege escalation vulnerability (CVE-2026-46733, CVSS 7.8) that allows low-privileged Windows users to execute…

How to fix or mitigate CVE-2026-46733?

24 hours: Complete inventory of all Windows systems running Dell DDPM versions prior to v2.3; document business criticality of each affected system. 7 days: Implement compensating controls including restricting DDPM access to administrative users only and enabling detailed privilege escalation monitoring. 30 days: Develop remediation roadmap including planned upgrade to DDPM v2.3+ when released; monitor Dell security advisories for patch availability; evaluate alternative display and peripheral management solutions for critical systems.

Dell Display Manager CVE-2026-46733

EUVD-2026-39390 HIGH

Improper Access Control (CWE-284)

2026-06-25 dell

GHSA-r76q-57r9-2mhg

Authentication Bypass Dell Microsoft RCE Display And Peripheral Manager

7.8

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local-only access (AV:L) with an existing low-privileged account (PR:L), no user interaction, and improper access control yielding full code execution gives high C/I/A.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorVendor: dell

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 25, 2026 - 14:26 vuln.today

CVE Published

Jun 25, 2026 - 13:17 cve.org

HIGH 7.8

DescriptionCVE.org

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

AnalysisAI

Local privilege escalation to code execution affects Dell Display and Peripheral Manager (DDPM) for Windows in all versions prior to 2.3, where an Improper Access Control flaw (CWE-284) lets a low-privileged local user execute arbitrary code in a higher-privileged context. The CVSS 3.1 base score is 7.8 (High), reflecting full confidentiality, integrity, and availability impact from a local, low-privilege starting point with no user interaction. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.

Technical ContextAI

DDPM is a Dell endpoint utility that manages monitor settings, brightness, KVM, and peripheral controls on Windows; it typically runs with a privileged background service or component to apply system-level display/peripheral changes. The CWE-284 (Improper Access Control) root cause means a security-relevant operation or resource exposed by DDPM is reachable by users who should not have that level of access - commonly an insufficiently protected service, IPC channel, file/registry ACL, or executable path that a standard user can influence. The CPE cpe:2.3:a:dell:display_and_peripheral_manager identifies the affected application, and the local-only CVSS vector (AV:L) confirms the abused interface is reachable only from an existing local session rather than over the network.

RemediationAI

Vendor-released patch: upgrade Dell Display and Peripheral Manager to version 2.3 or later, per Dell advisory DSA-2026-277 (https://www.dell.com/support/kbdoc/en-fm/000477679/dsa-2026-277). Because exploitation is local, interim compensating controls until patching include restricting interactive/local logon on affected systems to trusted users, applying least-privilege so standard users cannot reach the vulnerable DDPM interface, and-if business needs allow-temporarily uninstalling or stopping the DDPM background service/component (trade-off: loss of monitor/peripheral management features such as KVM, brightness, and color profiles). Monitor for unexpected child processes or privilege transitions originating from DDPM executables as a detective control.