Display And Peripheral Manager Ddpm Windows
Monthly
Authentication bypass via spoofing in Dell Display and Peripheral Manager (DDPM) for Windows, versions prior to 2.3.0.17, enables local low-privileged attackers to escalate their privileges and execute arbitrary code on affected systems. The flaw (CWE-290) allows an attacker already present on the system to spoof an authenticated identity, circumventing DDPM's internal access controls. Dell has released a patched version (2.3.0.17) via advisory DSA-2026-320; no public exploit or CISA KEV listing has been identified at time of analysis.
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows, all versions prior to 2.3.0.17, is achievable by a low-privileged local attacker exploiting an authentication bypass by spoofing flaw. The CWE-284 root cause - improper access control - allows the attacker to circumvent DDPM's privilege verification, resulting in full confidentiality, integrity, and availability compromise on the affected host. No active exploitation has been confirmed by CISA KEV and no public exploit code has been identified at time of analysis; Dell has released the corrective patch in version 2.3.0.17 via advisory DSA-2026-320.
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows allows a low-privileged local attacker on affected systems to bypass access controls and run code at a higher privilege level. All DDPM versions prior to 2.3.0.17 are affected, as confirmed by Dell advisory DSA-2026-320. No public exploit code or CISA KEV listing has been identified at time of analysis, though tags indicate RCE and authentication bypass primitives are involved, consistent with the CWE-284 root cause.
Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Windows enables a low-privileged local attacker to bypass access controls and execute arbitrary code at elevated privileges, affecting all versions prior to 2.3.0.17. The root cause is an improper access control flaw classified as CWE-290 (Authentication Bypass by Capture-replay), through which a standard user account can subvert DDPM's privileged service process and achieve system-level code execution. Dell has released version 2.3.0.17 via advisory DSA-2026-320, and no public exploit or active exploitation has been identified at time of analysis.
Authentication bypass via spoofing in Dell Display and Peripheral Manager (DDPM) for Windows, versions prior to 2.3.0.17, enables local low-privileged attackers to escalate their privileges and execute arbitrary code on affected systems. The flaw (CWE-290) allows an attacker already present on the system to spoof an authenticated identity, circumventing DDPM's internal access controls. Dell has released a patched version (2.3.0.17) via advisory DSA-2026-320; no public exploit or CISA KEV listing has been identified at time of analysis.
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows, all versions prior to 2.3.0.17, is achievable by a low-privileged local attacker exploiting an authentication bypass by spoofing flaw. The CWE-284 root cause - improper access control - allows the attacker to circumvent DDPM's privilege verification, resulting in full confidentiality, integrity, and availability compromise on the affected host. No active exploitation has been confirmed by CISA KEV and no public exploit code has been identified at time of analysis; Dell has released the corrective patch in version 2.3.0.17 via advisory DSA-2026-320.
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows allows a low-privileged local attacker on affected systems to bypass access controls and run code at a higher privilege level. All DDPM versions prior to 2.3.0.17 are affected, as confirmed by Dell advisory DSA-2026-320. No public exploit code or CISA KEV listing has been identified at time of analysis, though tags indicate RCE and authentication bypass primitives are involved, consistent with the CWE-284 root cause.
Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Windows enables a low-privileged local attacker to bypass access controls and execute arbitrary code at elevated privileges, affecting all versions prior to 2.3.0.17. The root cause is an improper access control flaw classified as CWE-290 (Authentication Bypass by Capture-replay), through which a standard user account can subvert DDPM's privileged service process and achieve system-level code execution. Dell has released version 2.3.0.17 via advisory DSA-2026-320, and no public exploit or active exploitation has been identified at time of analysis.