CVE-2026-111521

HIGH 7.0

CVSS Score

7.0

EPSS Score

0.0%

EPSS Percentile

0th

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

CWE	CWE-367
Vendor	dell
Product	display and peripheral manager (ddpm windows)
Published	Nov 11, 2026

Stay Ahead of the Next One

Get instant alerts for dell display and peripheral manager (ddpm windows)

Be the first to know when new high vulnerabilities affecting dell display and peripheral manager (ddpm windows) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Dell / Display and Peripheral Manager (DDPM Windows)

0 < 2.4.0.17

References

NVD ↗ CVE.org ↗ EPSS Data ↗

dell.com: https://www.dell.com/support/kbdoc/en-us/000527625/dsa-2026-482-security-update-for-dell-display-and-peripheral-manager-ddpm-windows-for-a-time-of-check-time-of-use-toctou-vulnerability

Credits

Dell would like to thank Steffen Rogge for reporting this issue.