CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability

High · published August 9, 2019

CVSS v3.0
7.8
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal exploit in order to run a malicious executable with elevated privileges.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.9th percentile
Published
2019-08-09T19:13Z
EPSS history
Timeline
  • 09 AUG 19:13Z
    Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability
    cvelistv5