What is the CVSS score of EUVD-2026-39402?

EUVD-2026-39402 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Display And Peripheral Manager are affected by EUVD-2026-39402?

Dell Display and Peripheral Manager (DDPM) for Mac versions prior to 2.3 contain a local privilege escalation vulnerability that allows low-privileged users to gain full system control.

How to fix or mitigate EUVD-2026-39402?

Within 24 hours: Enumerate all Mac endpoints running DDPM versions below 2.3 and restrict DDPM execution to administrative users only. Within 7 days: Implement compensating controls including host-based privilege escalation monitoring and consider disabling DDPM if peripheral management is not operationally required. Within 30 days: Deploy DDPM 2.3 or later once released; verify deployment completion across inventory.

Display And Peripheral Manager EUVD-2026-39402

| CVE-2026-46732 HIGH

Race Condition (CWE-362)

2026-06-25 dell

GHSA-r7m9-9j8x-g78x

Information Disclosure Race Condition Dell Display And Peripheral Manager

7.0

CVSS 3.1 · NVD

Severity by source

Vendor (dell) PRIMARY

MEDIUM

qualitative

NVD

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.0 HIGH

Local already-authenticated user (AV:L/PR:L) must win a non-deterministic race (AC:H) with no user interaction (UI:N), yielding total host compromise (C:H/I:H/A:H) within the same security scope (S:U).

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Jun 29, 2026 - 23:59 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 29, 2026 - 23:59 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 29, 2026 - 23:52 vuln.today

cvss_changed

Severity Changed

Jun 29, 2026 - 23:52 NVD

MEDIUM HIGH

CVSS changed

Jun 29, 2026 - 23:52 NVD

6.7 (MEDIUM) 7.0 (HIGH)

Analysis Generated

Jun 25, 2026 - 14:38 vuln.today

DescriptionNVD

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

AnalysisAI

Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Mac, versions prior to 2.3, lets a low-privileged local user win a race condition (CWE-362) to gain elevated privileges. The flaw stems from improper synchronization around a shared resource, and successful exploitation yields full compromise of confidentiality, integrity, and availability on the host. No public exploit identified at time of analysis, and EPSS is negligible (0.07%); CISA SSVC marks exploitation as none but technical impact as total.