DSA-2026-250: Security Update for Dell/Alienware Purchased Apps for an Improper Link Resolution Before File Access Vulnerability
Summary: Dell/Alienware Purchased Apps remediation is available for an Improper Link Resolution Before File Access vulnerability that could be exploited by malicious users to compromise the affected system. ...
Impact
Medium
Details
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-44275 |
Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write |
6.3 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
|
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-44275 |
Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write |
6.3 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
|
Affected Products & Remediation
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Release Date (MM/DD/YYYY) |
Link |
|
Dell/Alienware Purchased Apps |
Software |
Versions prior to 1.1.32.0 |
Version 1.1.32.0 or later |
06/04/2026 |
Dell-Alienware Purchased Apps Application | Driver Details | Dell US |
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Release Date (MM/DD/YYYY) |
Link |
|
Dell/Alienware Purchased Apps |
Software |
Versions prior to 1.1.32.0 |
Version 1.1.32.0 or later |
06/04/2026 |
Dell-Alienware Purchased Apps Application | Driver Details | Dell US |
Revision History
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-06-08 | Initial Release |
Acknowledgements
Dell would like to thank falconCorrup for reporting this issue.