CVE-2023-32454: Dell Update Package Framework

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service

Affected products

• Dell Update Package Framework: up to and including 4.9.4.36

Published 2024-02-06. Last modified 2026-06-17.