HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-0156

CVSS 7.0v3.1pub. 2024-03-04upd. 2025-01-08

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Dell Digital Delivery
APP
Dell
< 5.2.0.0

🟢

PATCH AVAILABLE

Vendor update available. Deploy in standard maintenance cycle.

Tags

RCELPEMemory

CWE

CWE-122

CWE-120

References

www.dell.com/support/kbdoc/en-us/000222536/dsa-2024-032…

Related vulnerabilities

CVE-2025-38739HIGH7.2ten sam produkt

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerabili...

CVE-2024-0155HIGH7.0ten sam produkt

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileg...

CVE-2020-5342HIGH7.8ten sam produkt

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A loc...

CVE-2019-3744HIGH7.8ten sam produkt

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local...

CVE-2019-3742HIGH7.8ten sam produkt

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A loc...