Dell Digital Delivery vulnerabilities

8 CVEs affecting Dell Digital Delivery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-38739, published 2025-08-04.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-5342, published 2020-03-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run…
• CVE-2018-11072, published 2018-10-02. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and…
• CVE-2025-38739, published 2025-08-04. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability,…
• CVE-2019-3742, published 2019-08-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary…
• CVE-2019-3744, published 2019-08-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by…
• CVE-2024-0156, published 2024-03-04. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code…
• CVE-2024-0155, published 2024-03-04. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to application crash or…
• CVE-2023-32470, published 2023-09-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to…