CVE-2022-24426: dell alienware_update Uncontrolled Search Path Element

Vulnerability summary

CVE-2022-24426 is a high (CVSS 7.8) Uncontrolled Search Path Element vulnerability in dell alienware_update. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.2% of scored vulnerabilities.

Timeline

1. 01-04-2022
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation.

• CWE-427Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.