CVE-2026-59912

Improper Access Control in Dell Display and Peripheral Manager (DDPM Mac) Enabling Local Privilege Escalation

View on CVE.org
Published Aug 3, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution.

Analysis

AI-generated

Technical impact

Dell Display and Peripheral Manager for Mac, versions prior to 2.3.0.1005, has an improper access control flaw. A local attacker with limited privileges can exploit the vulnerability, potentially escalating privileges and executing arbitrary code on the affected device.

Affected Systems

Dell Display and Peripheral Manager (DDPM Mac) on macOS, all editions, versions before 2.3.0.1005.

Risk and Exploitability

The CVSS score of 7.8 indicates a high‑severity risk. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access to the target machine; from that position an attacker can elevate privileges and run arbitrary code with little resistance.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Dell DDPM update 2.3.0.1005 or newer to address the access control flaw.
  • Limit the set of local user accounts that are allowed to interact with DDPM to the minimum necessary for normal operation.
  • Maintain vigilant monitoring of system logs for unusual privilege escalation or code execution events as a defensive measure.

Generated by OpenCVE AI on August 4, 2026 at 20:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Dell
Dell display And Peripheral Manager
Vendors & Products Dell
Dell display And Peripheral Manager
Type Values Removed Values Added
Title Improper Access Control in Dell Display and Peripheral Manager (DDPM Mac) Enabling Local Privilege Escalation
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution.
Weaknesses CWE-284
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
dell
Published
Updated
Aug 5, 2026, 3:57 AM
Reserved
Jul 7, 2026, 5:04 PM

View source JSON

Updated
Aug 3, 2026, 6:54 PM

JSON

Status
Analyzed
Published
Aug 3, 2026, 7:16 PM
Modified
Oct 23, 2026, 9:10 PM

View source JSON

No data.

Updated
Aug 5, 2026, 9:45 AM

JSON