Dell Command Update vulnerabilities

22 CVEs affecting Dell Command Update, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-67268, published 2026-08-19.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-28962, published 2024-08-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access…
• CVE-2019-3750, published 2019-12-03. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to…
• CVE-2019-3749, published 2019-12-03. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to…
• CVE-2026-49817, published 2026-08-19. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this…
• CVE-2026-49816, published 2026-08-19. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this…
• CVE-2022-24426, published 2022-04-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could…
• CVE-2022-34384, published 2023-02-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5…
• CVE-2022-34382, published 2022-09-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may…
• CVE-2023-28065, published 2023-06-23. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could…
• CVE-2022-34458, published 2023-02-01. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download…

Latest

• CVE-2026-67268, published 2026-08-19. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially…
• CVE-2026-67267, published 2026-08-19. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access…
• CVE-2026-67266, published 2026-08-19. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading…
• CVE-2026-58565, published 2026-08-19. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to…
• CVE-2026-58564, published 2026-08-19. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability,…
• CVE-2026-58562, published 2026-08-19. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to…
• CVE-2026-56797, published 2026-08-19. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this…
• CVE-2026-56796, published 2026-08-19. Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could…
• CVE-2026-53477, published 2026-08-19. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit…