EUVD-2026-57508
GHSA-r8w8-h2r8-64h7
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local access required and standard user account sufficient (PR:L/AV:L); full C/I/A reflects EoP to arbitrary code execution on the host.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
AnalysisAI
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows allows a low-privileged local attacker on affected systems to bypass access controls and run code at a higher privilege level. All DDPM versions prior to 2.3.0.17 are affected, as confirmed by Dell advisory DSA-2026-320. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a low-privileged local Windows user account on a system where Dell DDPM is installed and running a version prior to 2.3.0.17. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H scores 7.8 High, reflecting that exploitation is local, requires only a low-privileged account, has low complexity, and yields full confidentiality, integrity, and availability impact on the host. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Dell Display and Peripheral Manager (DDPM) for Windows to version 2.3.0.17 or later, as directed by Dell advisory DSA-2026-320 at https://www.dell.com/support/kbdoc/en-us/000490038/dsa-2026-320-security-updates-for-dell-display-and-peripheral-manager-ddpm-windows-for-multiple-vulnerabilities. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct an inventory of all systems running DDPM and identify deployed versions, prioritizing business-critical endpoints, and notify relevant teams of CVE-2026-59917 (DSA-2026-320). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Authentication bypass via spoofing in Dell Display and Peripheral Manager (DDPM) for Windows, versions prior to 2.3.0.17
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows, all versi
Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Windows enables a low-privileged local atta
Same weakness CWE-284 – Improper Access Control
View allShare
External POC / Exploit Code
Leaving vuln.today