CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.6
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
- EPSS probability
- 0.10%
- CWE
- CWE-379
- Published
- 2026-08-24
- Last modified
- 2026-08-27
Affected products
- Dell Alienware Area 51m R2
- Dell Alienware Area-51 AAT2265
- Dell Alienware Aurora R13
- Dell Alienware Aurora R15
- Dell Alienware Aurora R15 AMD
- Dell Alienware Aurora Ryzen Edition R14
- Dell Alienware m15 R3
- Dell Alienware m15 R4
Weakness type
Related vulnerabilities
- CVE-2026-69482 — Windows Error Reporting Tampering Vulnerability
- CVE-2026-85028 — Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
- CVE-2026-82346 — HP ImageDiags - Potential Escalation of Privilege
- CVE-2026-12555 — HP Easy Start for macOS - Security Update
- CVE-2026-50544 — NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions
- CVE-2026-14551 — Local Privilege Escalation in servereye client (sensorhub)
- CVE-2026-46388 — osquery: Unprivileged users can temporarily read file carve contents
- CVE-2026-7539 — HP Dock Accessory WMI Provider Installer Security Update