CVE-2026-46732

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-hk/000475656/dsa-2026-267?msockid=3021cac2195069ed3194ddad186a68f9	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:display_and_peripheral_manager:*:*:*:*:*:macos:*:*

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Dell Display and Peripheral Manager (DDPM Mac), versiones anteriores a la 2.3, contienen una vulnerabilidad de ejecución concurrente utilizando recursos compartidos con sincronización inadecuada (’condición de carrera’). Un atacante con privilegios bajos con acceso local podría explotar potencialmente esta vulnerabilidad, lo que llevaría a una Elevación de Privilegios.

Information

Published : 2026-06-25 14:16

Updated : 2026-10-25 23:10

NVD link : CVE-2026-46732

Mitre link : CVE-2026-46732

CVE.ORG link : CVE-2026-46732

JSON object : View

Products Affected

dell

display_and_peripheral_manager

CWE

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

{"id": "CVE-2026-46732", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46732", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-25T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.0, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.0}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "Display and Peripheral Manager", "versions": [{"status": "affected", "version": "0", "lessThan": "Version 2.3 and later", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-25T14:16:40.250", "references": [{"url": "https://www.dell.com/support/kbdoc/en-hk/000475656/dsa-2026-267?msockid=3021cac2195069ed3194ddad186a68f9", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges."}, {"lang": "es", "value": "Dell Display and Peripheral Manager (DDPM Mac), versiones anteriores a la 2.3, contienen una vulnerabilidad de ejecuci\u00f3n concurrente utilizando recursos compartidos con sincronizaci\u00f3n inadecuada (\u2019condici\u00f3n de carrera\u2019). Un atacante con privilegios bajos con acceso local podr\u00eda explotar potencialmente esta vulnerabilidad, lo que llevar\u00eda a una Elevaci\u00f3n de Privilegios."}], "lastModified": "2026-10-25T23:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:display_and_peripheral_manager:*:*:*:*:*:macos:*:*", "vulnerable": true, "matchCriteriaId": "6297898D-7447-4BD2-8662-9A4A01C3FE07", "versionEndExcluding": "2.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}