← Vulnerability feed

Vulnerability record · CVE-2025-46430 · published 10 November 2025

CVE-2025-46430: Dell display and peripheral manager execution with unnecessary privileges vulnerability

Dell · Display And Peripheral Manager

Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

7.3 CVSS 3.1 High EPSS 0.14% · top 97.5% CWE-250 · Execution with unnecessary privileges
7.3CVSS 3.1 base score
0.14%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.dell.com/support/kbdoc/en-us/000384546/dsa-2025-411 Vendor Advisory

Track CVE-2025-46430 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2026-59914Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low pri…EPSS 0.18%7.8CVE-2026-59916Dell display and peripheral manager authentication bypass by spoofing vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attac…EPSS 0.15%7.8CVE-2026-59917Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attac…EPSS 0.15%7.8CVE-2026-46731Dell display and peripheral manager authentication bypass by spoofing vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low pri…EPSS 0.18%7.8CVE-2026-59912Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged atta…EPSS 0.15%7.8CVE-2026-59913Dell display and peripheral manager missing authentication for critical function vulnerabilityDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A…EPSS 0.17%7.8CVE-2026-46735Dell display and peripheral manager os command injection vulnerabilityDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command (…EPSS 0.82%7.8CVE-2026-46733Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacke…EPSS 0.15%

Source: NIST National Vulnerability Database (record CVE-2025-46430), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.