Alienware Command Center Awcc
Monthly
Incorrect default permissions in Dell Alienware Command Center (AWCC) before version 6.14.54.0 allow a low-privileged local user to tamper with files or resources the component installs with overly permissive access controls, producing a high integrity impact and a lesser availability impact while leaving confidentiality untouched. Exploitation requires the product to be installed and the attacker to already hold a local account on the host; there is no network vector, and no user interaction is needed. The flaw is not confirmed as actively exploited (CISA KEV) and no public exploit was identified at time of analysis, so it warrants prioritized remediation on affected gaming endpoints rather than emergency response, with the vendor fix available as AWCC 6.14.54.0.
Improper verification of cryptographic signatures in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 allows an unauthenticated attacker with an adjacent-network position to present a forged or tampered signed object that the application accepts as trusted, resulting in arbitrary code execution and elevation of privilege. No user interaction is required, but attack complexity is rated high and reach is limited to hosts on the same adjacent network running the consumer gaming utility. No public exploit has been identified at the time of analysis, and the supplied data contains no KEV listing confirming active exploitation.
Dell Alienware Command Center (AWCC) releases prior to 6.14.54.0 contain an improper privilege management flaw (CWE-269) that lets an attacker who already holds a low-privileged local account escalate to higher privileges, with high impact to confidentiality, integrity and availability. Exploitation requires local access to a Windows host running the affected AWCC build, and the vendor has published a security advisory (DSA-2026-429) covering multiple vulnerabilities in the 6.x line. No public exploit code has been identified at time of analysis, and the flaw is not confirmed as actively exploited (no CISA KEV listing) despite a high CVSS base score of 7.8.
Local privilege escalation in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 allows a low-privileged local user to gain elevated privileges and, in some exploitation paths, to disrupt the service and cause denial of service. The victim must already have an authenticated local session on the affected machine (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.0); attack complexity is high, indicating a non-deterministic race or specific runtime state is required rather than a reliable one-shot trigger, and no user interaction is needed. No public exploit code has been identified at time of analysis, no CISA KEV listing is present, and no EPSS score was provided, so this should be treated as a moderate-priority local hardening issue rather than an urgent remote-exploitation emergency.
Elevation of Privileges in Dell Alienware Command Center (AWCC) versions prior to 6.13.8.0 allows a local low-privileged attacker to operate beyond their intended permission level due to a CWE-272 Least Privilege Violation. The CVSS vector (AV:L/AC:H/PR:L) confirms this is a local attack requiring an existing low-privileged foothold and elevated complexity conditions, with primary impact on system integrity (I:H). No public exploit or active exploitation has been identified at time of analysis; SSVC rates exploitation as 'none' and technical impact as 'partial', consistent with the moderate 5.3 base score.
Elevation of privilege in Dell Alienware Command Center (AWCC) releases prior to 6.14.54.0 lets a local, non-administrative user gain higher-integrity execution on the host, with the vendor advisory also citing arbitrary code execution and denial of service as possible outcomes. Dell scores this at CVSS 6.7 with a local attack vector, high attack complexity, low privileges required and user interaction (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H), so an attacker must already hold a foothold on the machine and must induce the user to do something before the least-privilege weakness (CWE-272) can be exercised. No public exploit code or in-the-wild exploitation has been identified at time of analysis, and the vendor recommends updating to AWCC 6.14.54.0 per DSA-2026-429.
Incorrect default permissions in Dell Alienware Command Center (AWCC) before version 6.14.54.0 allow a low-privileged local user to tamper with files or resources the component installs with overly permissive access controls, producing a high integrity impact and a lesser availability impact while leaving confidentiality untouched. Exploitation requires the product to be installed and the attacker to already hold a local account on the host; there is no network vector, and no user interaction is needed. The flaw is not confirmed as actively exploited (CISA KEV) and no public exploit was identified at time of analysis, so it warrants prioritized remediation on affected gaming endpoints rather than emergency response, with the vendor fix available as AWCC 6.14.54.0.
Improper verification of cryptographic signatures in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 allows an unauthenticated attacker with an adjacent-network position to present a forged or tampered signed object that the application accepts as trusted, resulting in arbitrary code execution and elevation of privilege. No user interaction is required, but attack complexity is rated high and reach is limited to hosts on the same adjacent network running the consumer gaming utility. No public exploit has been identified at the time of analysis, and the supplied data contains no KEV listing confirming active exploitation.
Dell Alienware Command Center (AWCC) releases prior to 6.14.54.0 contain an improper privilege management flaw (CWE-269) that lets an attacker who already holds a low-privileged local account escalate to higher privileges, with high impact to confidentiality, integrity and availability. Exploitation requires local access to a Windows host running the affected AWCC build, and the vendor has published a security advisory (DSA-2026-429) covering multiple vulnerabilities in the 6.x line. No public exploit code has been identified at time of analysis, and the flaw is not confirmed as actively exploited (no CISA KEV listing) despite a high CVSS base score of 7.8.
Local privilege escalation in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 allows a low-privileged local user to gain elevated privileges and, in some exploitation paths, to disrupt the service and cause denial of service. The victim must already have an authenticated local session on the affected machine (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.0); attack complexity is high, indicating a non-deterministic race or specific runtime state is required rather than a reliable one-shot trigger, and no user interaction is needed. No public exploit code has been identified at time of analysis, no CISA KEV listing is present, and no EPSS score was provided, so this should be treated as a moderate-priority local hardening issue rather than an urgent remote-exploitation emergency.
Elevation of Privileges in Dell Alienware Command Center (AWCC) versions prior to 6.13.8.0 allows a local low-privileged attacker to operate beyond their intended permission level due to a CWE-272 Least Privilege Violation. The CVSS vector (AV:L/AC:H/PR:L) confirms this is a local attack requiring an existing low-privileged foothold and elevated complexity conditions, with primary impact on system integrity (I:H). No public exploit or active exploitation has been identified at time of analysis; SSVC rates exploitation as 'none' and technical impact as 'partial', consistent with the moderate 5.3 base score.
Elevation of privilege in Dell Alienware Command Center (AWCC) releases prior to 6.14.54.0 lets a local, non-administrative user gain higher-integrity execution on the host, with the vendor advisory also citing arbitrary code execution and denial of service as possible outcomes. Dell scores this at CVSS 6.7 with a local attack vector, high attack complexity, low privileges required and user interaction (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H), so an attacker must already hold a foothold on the machine and must induce the user to do something before the least-privilege weakness (CWE-272) can be exercised. No public exploit code or in-the-wild exploitation has been identified at time of analysis, and the vendor recommends updating to AWCC 6.14.54.0 per DSA-2026-429.