EUVD-2026-52398
GHSA-w9pq-2jmv-9mwm
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local low-privilege access sufficient; AC:L as no special configuration required; full C/I/A reflects reliable privilege escalation to code execution.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution.
AnalysisAI
Elevation of privileges and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for macOS exposes endpoints running versions prior to 2.3.0.1005 to local privilege escalation attacks. An improper access control flaw (CWE-284) allows a low-privileged local account to bypass access controls enforced by DDPM, ultimately achieving arbitrary code execution with elevated rights. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an interactive local session on the target macOS system with a low-privileged (non-administrator) account, as confirmed by the CVSS vector PR:L and AV:L. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 7.8 (High) is supported by the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, which reflects low attack complexity, no user interaction, and full impact across all three security properties - consistent with a reliable local privilege escalation primitive. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to upgrade Dell Display and Peripheral Manager for macOS to version 2.3.0.1005 or later, as specified in Dell security advisory DSA-2026-319 (https://www.dell.com/support/kbdoc/en-us/000490035/dsa-2026-319). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all macOS endpoints to identify those running Dell Display and Peripheral Manager (DDPM) versions prior to 2.3.0.1005 and document deployment scope and user access patterns. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allShare
External POC / Exploit Code
Leaving vuln.today