CVE-2024-0155
CVSS 3.1 Score 7.0 of 10 (high)
Details
Summary
CVE-2024-0155 is a Use After Free vulnerability affecting Dell Digital Delivery, with versions prior to 5.0.86.0 being at risk. This issue allows a local, low-privileged attacker to potentially exploit the flaw, leading to an application crash or even the execution of arbitrary code. The vulnerability occurs due to improper memory handling in the software, leaving freed memory accessible for unintended use. Successful exploitation could result in significant security implications, including data corruption or unauthorized system access. It is recommended that users update to the latest version of Dell Digital Delivery as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Dell Digital Delivery
Affected Vendors
- Dell Technologies, Inc.