What is the CVSS score of EUVD-2026-57419?

EUVD-2026-57419 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Dell DDPM are affected by EUVD-2026-57419?

Dell Display and Peripheral Manager (DDPM) for Windows contains a local privilege escalation vulnerability (CVE-2026-59916, CVSS 7.8) that allows standard user accounts to execute arbitrary code with…. A patch is available.

How to fix or mitigate EUVD-2026-57419?

Within 24 hours, conduct an inventory of all systems running Dell DDPM versions prior to 2.3.0.17 and assess exposure in high-risk environments (servers handling sensitive data, administrative workstations). Within 7 days, validate vendor-released patch version 2.3.0.17 (advisory DSA-2026-320) in a non-production environment and deploy to development systems and workstations with lower business criticality. Within 30 days, complete deployment of version 2.3.0.17 across all production systems and endpoints to eliminate the local privilege escalation vector organization-wide.

Dell DDPM EUVD-2026-57419

| CVE-2026-59916 HIGH

Authentication Bypass by Spoofing (CWE-290)

2026-08-12 dell

GHSA-v668-m47g-9xxf

Authentication Bypass RCE Microsoft Dell Display And Peripheral Manager Ddpm Windows

7.8

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local access with low privileges suffices via IPC abuse; full C/I/A impact reflects achievable SYSTEM-level code execution; scope unchanged as compromise is contained to the local host.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorVendor: dell

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 20:05 vuln.today

Patch available

Aug 12, 2026 - 20:03 EUVD

CVE Published

Aug 12, 2026 - 19:17 cve.org

HIGH 7.8

DescriptionCVE.org

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.

AnalysisAI

Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Windows enables a low-privileged local attacker to bypass access controls and execute arbitrary code at elevated privileges, affecting all versions prior to 2.3.0.17. The root cause is an improper access control flaw classified as CWE-290 (Authentication Bypass by Capture-replay), through which a standard user account can subvert DDPM's privileged service process and achieve system-level code execution. Dell has released version 2.3.0.17 via advisory DSA-2026-320, and no public exploit or active exploitation has been identified at time of analysis.

Technical ContextAI

Dell Display and Peripheral Manager (DDPM) is a Windows application for centrally managing Dell-branded displays and peripheral devices, identified by CPE cpe:2.3:a:dell:display_and_peripheral_manager_(ddpm_windows). The root cause is CWE-290 (Authentication Bypass by Capture-replay), a class of flaw in which an application's access control mechanism can be circumvented by replaying or spoofing an authentication artifact - such as a session token, IPC credential, or named pipe identity - without proper re-validation. This pattern is particularly common in device management software that runs a background service at SYSTEM or high-integrity level while exposing a local inter-process interface to lower-privileged user-space components. A low-privileged attacker can abuse this interface to impersonate or inject into the privileged service, bypassing the intended authorization boundary. The CVSS vector (AV:L/AC:L/PR:L/UI:N) confirms the flaw is accessible to any local standard user account with no additional complexity, consistent with this IPC abuse pattern.

RemediationAI

The primary fix is to upgrade Dell Display and Peripheral Manager (DDPM) for Windows to version 2.3.0.17 or later, as documented in Dell Security Advisory DSA-2026-320 at https://www.dell.com/support/kbdoc/en-us/000490038/dsa-2026-320-security-updates-for-dell-display-and-peripheral-manager-ddpm-windows-for-multiple-vulnerabilities. If immediate patching is not operationally feasible, administrators should restrict interactive or remote desktop access to affected endpoints to only trusted personnel, reducing the pool of potential low-privileged local attackers. Enforcing application control policies (e.g., Windows Defender Application Control or AppLocker) to prevent unauthorized processes from interacting with DDPM service interfaces provides an additional compensating control, though this requires policy tuning and may affect legitimate DDPM functionality. In environments that do not require display and peripheral management features, uninstalling DDPM entirely is a viable interim control, with the trade-off of losing centralized peripheral configuration management. Endpoint detection rules monitoring for unexpected child process creation or privilege changes originating from DDPM service processes can serve as a detective compensating measure.