EUVD-2026-65091
GHSA-gc32-24f5-f528
Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Local-only vector confirmed by description; PR:L because low-privileged account is required to plant the symlink; UI:R because a privileged user must trigger the BIOS update; no confidentiality impact.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
AnalysisAI
Arbitrary file write in Dell Client BIOS affects multiple Alienware, Inspiron, and XPS systems through a link-following flaw (CWE-379) exploitable by a low-privileged local attacker. The vulnerability allows the BIOS update or management process to follow attacker-planted symlinks in temporary directories, redirecting privileged file writes to arbitrary filesystem locations - enabling integrity compromise or availability impact at the OS level. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: (1) the attacker must hold a local, low-privileged account on the target system (PR:L) - remote unauthenticated exploitation is not possible given AV:L; (2) the attacker must be able to create symbolic links in the temporary directory used by the Dell BIOS update utility, which is typically permitted for standard user accounts on Windows and Linux; (3) a user or administrator must actively trigger a BIOS update or related Dell firmware management operation (UI:R) - the vulnerability is not self-triggering. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 6.6 (Medium) reflects the local-only attack vector (AV:L), low privilege requirement (PR:L), and required user interaction (UI:R), all of which constrain exploitability significantly. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to update the BIOS firmware to the fixed versions confirmed by EUVD and Dell advisory DSA-2026-280 (https://www.dell.com/support/kbdoc/en-us/000501826). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today