# CVE-2026-111521: Dell Display and Peripheral Manager TOCTOU privilege escalation

Source: https://junglewise.ai/threats/cve-2026-111521-dell-display-and-peripheral-manager-ddpm-windows-versions-prior  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-11. Updated: 2026-11-11  
License: CC BY 4.0 with a link back

CVE-2026-111521 · Severity: high · CVSS 7 · Published 2026-11-11

Dell Display and Peripheral Manager for Windows is system software that manages computer displays and peripherals. A race condition flaw allows a low-privileged local user to execute arbitrary code with elevated privileges, potentially gaining complete control over the system.

Technologies: [Dell Display and Peripheral Manager](https://junglewise.ai/threats/technologies/display-and-peripheral-manager). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-111521 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-111521 being exploited in the wild.

**How severe is CVE-2026-111521?** High severity, with a CVSS score of 7, published 11 November 2026.

**Which products and versions are affected?** Dell Display and Peripheral Manager prior to 2.4.0.17.

**Is there a fix for CVE-2026-111521?** Yes: fixed in 2.4.0.17 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-111521 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-111521?** Check whether you run Dell Display and Peripheral Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 2.4.0.17 and later

## Technical details

A Time-of-check Time-of-use (TOCTOU) race condition exists in proprietary code, exploitable by a local attacker with low privileges and without user interaction. The vulnerability requires relatively high complexity to exploit but could result in arbitrary code execution. A fix is available in version 2.4.0.17 and later.

## Affected products

- Dell Display and Peripheral Manager prior to 2.4.0.17

## Timeline

- 2026-11-11: disclosed
- 2026-11-11: patched

## References

- [https://www.dell.com/support/kbdoc/en-us/000527625/dsa-2026-482-security-update-for-dell-display-and-peripheral-manager-ddpm-windows-for-a-time-of-check-time-of-use-toctou-vulnerability](https://www.dell.com/support/kbdoc/en-us/000527625/dsa-2026-482-security-update-for-dell-display-and-peripheral-manager-ddpm-windows-for-a-time-of-check-time-of-use-toctou-vulnerability)

## Related threats

- [Dell Display and Peripheral Manager improper access control privilege escalation](https://junglewise.ai/threats/cve-2026-59912-dell-display-and-peripheral-manager-improper-access-control)
- [Dell Display and Peripheral Manager Mac OS command injection](https://junglewise.ai/threats/cve-2026-46735-dell-display-and-peripheral-manager-mac-os-command-injection)
- [Dell Display and Peripheral Manager improper certificate validation](https://junglewise.ai/threats/cve-2026-46734-dell-display-and-peripheral-manager-improper-certificate)
- [Dell Display and Peripheral Manager improper access control](https://junglewise.ai/threats/cve-2026-46733-dell-display-and-peripheral-manager-improper-access-control)
- [Dell Display and Peripheral Manager Mac race condition privilege escalation](https://junglewise.ai/threats/cve-2026-46732-dell-display-and-peripheral-manager-mac-race-condition-privilege)