Alienware M17 R4
Monthly
Arbitrary file write in Dell Client BIOS affects multiple Alienware, Inspiron, and XPS systems through a link-following flaw (CWE-379) exploitable by a low-privileged local attacker. The vulnerability allows the BIOS update or management process to follow attacker-planted symlinks in temporary directories, redirecting privileged file writes to arbitrary filesystem locations - enabling integrity compromise or availability impact at the OS level. No public exploit identified at time of analysis and no CISA KEV listing; however, patch versions are confirmed via Dell advisory DSA-2026-280.
Arbitrary file write in Dell Client BIOS affects multiple Alienware, Inspiron, and XPS systems through a link-following flaw (CWE-379) exploitable by a low-privileged local attacker. The vulnerability allows the BIOS update or management process to follow attacker-planted symlinks in temporary directories, redirecting privileged file writes to arbitrary filesystem locations - enabling integrity compromise or availability impact at the OS level. No public exploit identified at time of analysis and no CISA KEV listing; however, patch versions are confirmed via Dell advisory DSA-2026-280.