Update Package Framework (Dell) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2026-09-16. Vendor: Dell.
CVEs of Update Package Framework
- CVE-2026-86358 - CVSS 8.8 (high), 2026-09-16: Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent…
- CVE-2026-71182 - CVSS 6 (medium), 2026-09-16: Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high…
- CVE-2026-71181 - CVSS 6 (medium), 2026-09-16: Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high…
- CVE-2026-71180 - CVSS 8.2 (high), 2026-09-16: Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could…
- CVE-2026-71179 - CVSS 7.8 (high), 2026-09-16: Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command…
- CVE-2026-23857 - CVSS 8.2 (high), 2026-02-12: Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges…
- CVE-2025-22395 - CVSS 8.2 (high), 2025-01-07: Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability. A local low privileged attacker could…
- CVE-2023-39254 - CVSS 7.3 (high), 2024-03-01: Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could…
- CVE-2023-32454 - CVSS 7.1 (high), 2024-02-06: DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could…
- CVE-2019-3726 - CVSS 6.7 (medium), 2019-09-24: An Uncontrolled Search Path Vulnerability is applicable to the following: Dell Update Package (DUP) Framework file versions prior to 19.1.0.413, and Framework…
