DC
Product
Dell Command Update (DCU)
19
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 5Low 1
Watch
Add Dell Command Update (DCU) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58565 | 8.8 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability Affected: before 5.7.1 |
| CVE-2026-53477 | 7.8 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Affected: before 5.7.1 |
| CVE-2026-58564 | 7.8 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability Affected: before 5.7.1 |
| CVE-2026-49816 | 7.8 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability Affected: before 5.7.1 |
| CVE-2026-49817 | 7.8 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability Affected: before 5.7.1 |
| CVE-2022-34459 | 7.8 | Feb 1 | Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component Affected: before 4.7 |
| CVE-2022-34382 | 7.8 | Sep 2 | Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration Affected: before 4.6.0 |
| CVE-2022-24426 | 7.8 | Apr 1 | Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component Affected: 4.4.0 |
| CVE-2026-58562 | 7.3 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability Affected: before 5.7.1 |
| CVE-2026-56797 | 7.3 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Affected: before 5.7.1 |
| CVE-2023-28065 | 7.3 | Jun 23 | Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability Affected: 4.8.0 and prior |
| CVE-2023-28071 | 7.1 | Jun 23 | Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability Affected: 4.9.0, A01 and Prior |
| CVE-2023-23698 | 7.1 | Feb 10 | Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component Affected: Versions 4.6.0 and 4.7.1 |
| CVE-2026-56796 | 6.6 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability Affected: before 5.7.1 |
| CVE-2026-67268 | 6.5 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability Affected: before 5.7.1 |
| CVE-2026-67266 | 5.5 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability Affected: before 5.7.1 |
| CVE-2026-67267 | 5.5 | Aug 19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability Affected: before 5.7.1 |
| CVE-2022-34458 | 5.5 | Feb 1 | Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability… Affected: before 4.7 |
| CVE-2023-23697 | 3.3 | Feb 13 | Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation Affected: before 4.4.0 |
Showing 19