Executive brief
Dell Display and Peripheral Manager (DDPM) is Mac system software that manages displays and peripherals connected to computers. A low-privileged attacker with local access to an affected Mac can exploit an access control weakness to gain elevated privileges and execute arbitrary code, potentially compromising the entire system.
Technical details
The vulnerability is an improper access control flaw in Dell Display and Peripheral Manager Mac versions prior to 2.3.0.1005. A low-privileged local attacker can exploit the vulnerability without user interaction to achieve privilege escalation and arbitrary code execution. The attack requires local access to the system and a low privilege account already present. Dell has patched the issue in version 2.3.0.1005 and later.
Affected products
- Dell Display and Peripheral Manager prior to 2.3.0.1005
Timeline
- 2026-08-03: disclosed