Command Monitor Dcm
Monthly
Local privilege escalation in Dell Command | Monitor (DCM) versions prior to 10.13.2 allows an authenticated low-privileged Windows user to gain elevated privileges by abusing an incorrectly secured resource that the DCM agent accesses at higher integrity. Successful exploitation requires an existing local foothold on the endpoint, but needs no user interaction and changes scope (S:C) because the attacker leverages DCM's elevated context to impact the wider host - confidentiality and integrity are both rated High, availability is not. There is no remote or unauthenticated attack path, and no public exploit identified at time of analysis; Dell has published a fix in the DSA-2026-380 advisory, making this a credible but not urgent patching priority for fleets running older DCM agents.
Local privilege escalation in Dell Command | Monitor (DCM) versions prior to 10.13.2 allows an authenticated low-privileged Windows user to gain elevated privileges by abusing an incorrectly secured resource that the DCM agent accesses at higher integrity. Successful exploitation requires an existing local foothold on the endpoint, but needs no user interaction and changes scope (S:C) because the attacker leverages DCM's elevated context to impact the wider host - confidentiality and integrity are both rated High, availability is not. There is no remote or unauthenticated attack path, and no public exploit identified at time of analysis; Dell has published a fix in the DSA-2026-380 advisory, making this a credible but not urgent patching priority for fleets running older DCM agents.