GCVE - cpe:2.3:a:dell:dell_digital_delivery:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:dell_digital_delivery:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Dell Digital Delivery (`079a6ae2-8ffa-5042-ac1d-bc6d39741073`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-38739`	vulnerable	2026-06-08 07:23:06.382359	Details available HIGH (7.2) Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to Information Disclosure. Published: 2025-08-04T15:53:55.880Z Updated: 2025-08-04T16:50:20.705Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000349489/dsa-2025-302	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0156`	vulnerable	2026-06-08 06:21:58.637880	Details available HIGH (7) Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation. Published: 2024-03-04T12:54:27.226Z Updated: 2024-08-22T04:45:46.043Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000222536/dsa-2024-032-security-update-for-dell-digital-delivery-for-a-buffer-overflow-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32470`	vulnerable	2026-06-08 06:04:46.272340	Details available MEDIUM (5) Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS). Published: 2023-09-08T05:04:47.288Z Updated: 2024-09-25T20:07:24.641Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000216243/dsa-2023-224	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3744`	vulnerable	2026-06-08 05:13:55.855187	Details available HIGH (7.8) Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal exploit in order to run a malicious executable with elevated privileges. Published: 2019-08-09T19:13:37.161Z Updated: 2024-09-16T17:08:58.233Z Open on db.gcve.eu Reference links https://www.dell.com/support/article/SLN318085	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3742`	vulnerable	2026-06-08 05:13:55.853244	Details available HIGH (7.8) Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevated privileges. Published: 2019-08-09T19:12:42.990Z Updated: 2024-09-17T00:45:47.967Z Open on db.gcve.eu Reference links https://www.dell.com/support/article/SLN318085	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.