CVE-2025-53919CWE-276

CVE-2025-53919

High · published December 17, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

⚡ A sneaky temporary folder with weak permissions is the culprit here! Attackers with local access could exploit it to elevate their privileges like a secret passcode that lets them into restricted areas. 😱 Think of this vulnerability like a poorly secured backstage pass at a concert—only a few people should have access, but if someone finds that misplaced pass lying around, they can wander into areas they shouldn't! If exploited, a low-privileged attacker could gain elevated access, allowing them to manipulate system settings or access sensitive data as though they had the security clearance of a top-level administrator. This could lead to a cascade of security issues, making your system vulnerable to further attacks.

Put simply

Think of this vulnerability like a poorly secured backstage pass at a concert—only a few people should have access, but if someone finds that misplaced pass lying around, they can wander into areas they shouldn't! This issue in the Portrait Dell Color Management application allows a temporary folder with weak permissions to be created during installation and uninstallation. A local attacker could exploit this to gain elevated privileges on the system.

What to do

If exploited, a low-privileged attacker could gain elevated access, allowing them to manipulate system settings or access sensitive data as though they had the security clearance of a top-level administrator. This could lead to a cascade of security issues, making your system vulnerable to further attacks. To protect against this vulnerability, make sure to update the Portrait Dell Color Management application to the latest version (3.3.009 or newer) immediately. Additionally, regularly audit your permissions for temporary directories to ensure they are secure. 🛡️ You've got this! Take these steps and you'll be one step closer to keeping your system secure! 💪✨

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00113 · 1.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-12-17T22:15Z
Affected products (1)
ProductVersionsFixed in
portrait/dell_color_management≤ 3.3.008—
References (2)
EPSS history
Timeline
  • 17 DEC 00:00Z
    An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak…
    cvelistv5