VulnerabilityDeferred

CVE-2026-21419

Dell Display and Peripheral Manager (Windows) versions prior to 2.2 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability in the Installer and Service.

MEDIUM 6.6EPSS 0.15%

Does this matter?

Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.

Description

Dell Display and Peripheral Manager (Windows) versions prior to 2.2 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability in the Installer and Service. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges

CVSS 3.1: 6.6 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
EPSS: 0.15% probability · 5th percentile
CISA KEV: Not listed
Weakness: CWE-59
Source: security_alert@emc.com

References

https://www.dell.com/support/kbdoc/en-us/000384542/dsa-2026-009

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.