CVE-2024-0155
CVSS 3.1 Score 7.0 of 10 (high)
Details
Summary
CVE-2024-0155 is a Use After Free vulnerability affecting Dell Digital Delivery, with versions prior to 5.0.86.0 being at risk. This issue allows a local, low-privileged attacker to potentially exploit the flaw, leading to an application crash or even the execution of arbitrary code. The vulnerability occurs due to improper memory handling in the software, leaving freed memory accessible for unintended use. Successful exploitation could result in significant security implications, including data corruption or unauthorized system access. It is recommended that users update to the latest version of Dell Digital Delivery as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Dell Digital Delivery
Affected Vendors
- Dell Technologies, Inc.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions