FKIE_CVE-2026-40717
Vulnerability from fkie_nvd - Published: 2026-08-03 18:16 - Updated: 2026-08-07 15:14
Severity
6.6 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
References
| URL | Tags | ||
|---|---|---|---|
| security_alert@emc.com | https://www.dell.com/support/kbdoc/en-us/000481265/dsa-2026-295 | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| dell | monitor_driver | 1.0.0.0 | |
| dell | aw2526hl | - | |
| dell | aw2725dm | - | |
| dell | aw2726dl | - | |
| dell | aw2726dm | - | |
| dell | aw3225dm | - | |
| dell | aw3425dwm | - | |
| dell | e2722h | - | |
| dell | e2722hs | - | |
| dell | e2723h | - | |
| dell | e2723hn | - | |
| dell | e2724hs | - | |
| dell | e2725h | - | |
| dell | e2725hm | - | |
| dell | g2724d | - | |
| dell | p1917s | - | |
| dell | p2421d | - | |
| dell | p2421dc | - | |
| dell | p2425d | - | |
| dell | p2425de | - | |
| dell | p2720d | - | |
| dell | p2720dc | - | |
| dell | p2723d | - | |
| dell | p2723de | - | |
| dell | p5524q | - | |
| dell | s2725ds | - | |
| dell | s2725dsm | - | |
| dell | s3221qs | - | |
| dell | s3222dgm | - | |
| dell | s3222hg | - | |
| dell | s3222hn | - | |
| dell | s3222hs | - | |
| dell | s3225qc | - | |
| dell | s3225qs | - | |
| dell | s3422dwg | - | |
| dell | s3425dw | - | |
| dell | se2423ds | - | |
| dell | se2426hg | - | |
| dell | se2426hgs | - | |
| dell | se2722h | - | |
| dell | se2722hr | - | |
| dell | se2722hx | - | |
| dell | se2723ds | - | |
| dell | se2725h | - | |
| dell | se2725hm | - | |
| dell | se2726d | - | |
| dell | se2726h | - | |
| dell | se2726hs | - | |
| dell | se3223q | - |
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "Monitor driver",
"vendor": "Dell",
"versions": [
{
"lessThan": "1.0.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"source": "security_alert@emc.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dell:monitor_driver:1.0.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "477DB81C-FBDB-4DFE-9085-2288832DAFFE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:aw2526hl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "902EF258-2050-4A9D-A344-4EEA2A8A3353",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:aw2725dm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FCDE86A3-843A-45F1-B858-A099233067AD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:aw2726dl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C41F5C8-2D43-49A1-BA50-54703CFF562A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:aw2726dm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E0D2374A-00A3-4BCD-A2F3-261E4E8C7583",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:aw3225dm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CAE8C967-B645-48C4-8034-A0A5658E1ADC",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:aw3425dwm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8098343E-C5E3-4C67-B5A2-35B429C90BC2",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:e2722h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "838E3437-9964-459C-A503-58DAA83705CA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:e2722hs:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AC751FEA-9486-4E85-838E-F70445E08BEB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:e2723h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "02F57227-CEF1-4203-9ABE-7ED7EF845B74",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:e2723hn:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DBC089E7-9022-4F59-8487-73B64F7A309F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:e2724hs:-:*:*:*:*:*:*:*",
"matchCriteriaId": "38606966-E279-4EDB-8DAD-1166E8397D33",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:e2725h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "62A7CA75-3612-4F17-BD33-C493EC27CA7B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:e2725hm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CCA36F2C-BE78-42AA-9169-DC7C24CD414B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:g2724d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2AA3ED9D-A291-402F-BD7C-CC5145B9A1EC",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p1917s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "47CB8C62-F3EF-4CB0-86E0-9997980D7E1A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2421d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6043DB6E-338A-4F54-9799-67A1119A26E9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2421dc:-:*:*:*:*:*:*:*",
"matchCriteriaId": "459914A5-B7F5-4068-A7D1-B9B0E25A661C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2425d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "80D9C00B-6DC9-4030-8222-6E23049B7EDC",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2425de:-:*:*:*:*:*:*:*",
"matchCriteriaId": "27862DA9-A421-4421-A705-57064E4220D0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2720d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F2521FED-37A5-4ABC-B180-B489779DF1EA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2720dc:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8733B9E8-EA6D-4AB0-A115-3EA4D0589990",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2723d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9787B55B-CEF7-4E60-92C9-E27FFB23D76B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p2723de:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B0515EB7-C77A-4C2D-B40D-A478FB6E02A4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:p5524q:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7E1F070-2D05-488B-9922-DF9FA6F8FEB8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s2725ds:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C520187D-35E7-4A63-A1F5-DD0B94A7AEA3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s2725dsm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B2A0C3EA-1DAD-4CF5-903C-F9AB12AAAC3F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3221qs:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3CF288D8-E10E-4A29-ADDC-D9073FA9E6B6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3222dgm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "60B7B7F7-9C14-47D2-A58F-485266BFA9F8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3222hg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EEB8CE2C-82CB-4522-A632-101828583DE8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3222hn:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9D572B2B-12A0-4AFA-B790-443728DDBCCD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3222hs:-:*:*:*:*:*:*:*",
"matchCriteriaId": "300F7D79-0A07-4EA2-BA9E-14E5C1EDD930",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3225qc:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5F2871A8-752A-45BA-905F-6854C13A866B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3225qs:-:*:*:*:*:*:*:*",
"matchCriteriaId": "773F9C43-AEE4-433E-B38A-FCDE3EA898A5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3422dwg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "90CF1FD0-C96C-4468-9FAB-191E4DE2D000",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:s3425dw:-:*:*:*:*:*:*:*",
"matchCriteriaId": "845A3880-651A-4747-9898-73B68F810978",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2423ds:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6654436E-B7FB-4762-8857-2A13FD123F79",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2426hg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FB7BFF88-D279-46FA-AA67-266DAFB4ECF5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2426hgs:-:*:*:*:*:*:*:*",
"matchCriteriaId": "24E09FEA-BCD4-46B0-88D9-43E4E6811F35",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2722h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2C729406-AC6F-45DB-AA3D-E6E64903E4F8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2722hr:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EF6D0EDD-BD21-468C-8B8B-E7A793FA186C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2722hx:-:*:*:*:*:*:*:*",
"matchCriteriaId": "83B294E5-EF18-4C61-B07A-E0D307636EF0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2723ds:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8899A133-0B8B-4429-AFCF-67D11C8C38A0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2725h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C9A178F8-D756-4CC5-A03E-F200A64B45C3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2725hm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0B9DD640-DFDD-4DC4-B6F6-39E80CCF7109",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2726d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2D9C6C08-AEE1-408A-9737-6A6A8AE893A4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2726h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A70D1353-4316-4748-A28C-91A2DCA6247A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se2726hs:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F5D0258A-4607-426C-8812-4F3FC9569960",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:dell:se3223q:-:*:*:*:*:*:*:*",
"matchCriteriaId": "42F11AC4-B542-474A-8F04-B4B552914FBA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access (\u0027Link Following\u0027) vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges."
}
],
"id": "CVE-2026-40717",
"lastModified": "2026-08-07T15:14:55.180",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.3,
"impactScore": 5.2,
"source": "security_alert@emc.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-40717",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T03:57:14.412269Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-08-03T18:16:38.907",
"references": [
{
"source": "security_alert@emc.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.dell.com/support/kbdoc/en-us/000481265/dsa-2026-295"
}
],
"sourceIdentifier": "security_alert@emc.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-59"
}
],
"source": "security_alert@emc.com",
"type": "Secondary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…