5.5
Medium
CVE-2023-23698 Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on…
Description
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Command Update (DCU) | Versions not published |
Other CVEs of Dell Command Update (DCU)
The 21 CVEs of Dell Command Update (DCU) →
CVE-2026-53477
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition…
7.8
High
CVE-2026-58564
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability
7.8
High
CVE-2026-67268
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference…
6.5
Medium
CVE-2026-58565
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability
8.8
High