CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability

High · published August 9, 2019

CVSS v3.0
7.8
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevated privileges.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Published
2019-08-09T19:12Z
EPSS history
Timeline
  • 09 AUG 19:12Z
    Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability
    cvelistv5