6.6
Medium
CVE-2022-34458 Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System…
Description
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the disclosure of confidential data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Command Update (DCU) 4.7 | earliest → < 4.7 | 4.7 |
Other CVEs of Dell Command Update (DCU)
The 21 CVEs of Dell Command Update (DCU) →
CVE-2026-53477
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition…
7.8
High
CVE-2026-58564
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability
7.8
High
CVE-2026-67268
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference…
6.5
Medium
CVE-2026-58565
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability
8.8
High