CVE-2026-63693 - Vulnerability Details - OpenCVE

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability

History

Mon, 24 Aug 2026 20:00:00 +0000

Type	Values Removed	Values Added
Description		Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
Weaknesses		CWE-379
References		https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2026-08-24T19:40:03.175Z

Updated: 2026-08-24T19:40:03.175Z

Reserved: 2026-07-17T17:05:09.170Z

Link: CVE-2026-63693

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-24T20:16:55.677

Modified: 2026-08-24T20:16:55.677

Link: CVE-2026-63693

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-379

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63693", "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "state": "PUBLISHED", "assignerShortName": "dell", "dateReserved": "2026-07-17T17:05:09.170Z", "datePublished": "2026-08-24T19:40:03.175Z", "dateUpdated": "2026-08-24T19:40:03.175Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell", "dateUpdated": "2026-08-24T19:40:03.175Z"}, "datePublic": "2026-08-24T19:29:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-379", "description": "CWE-379: Creation of Temporary File in Directory with Insecure Permissions", "type": "CWE"}]}], "affected": [{"vendor": "Dell", "product": "Alienware Area 51m R2", "versions": [{"status": "affected", "version": "0", "lessThan": "1.37.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware Area-51 AAT2265", "versions": [{"status": "affected", "version": "0", "lessThan": "1.8.1", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware Aurora R13", "versions": [{"status": "affected", "version": "0", "lessThan": "1.33.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware Aurora R15", "versions": [{"status": "affected", "version": "0", "lessThan": "1.29.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware Aurora R15 AMD", "versions": [{"status": "affected", "version": "0", "lessThan": "1.26.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware Aurora Ryzen Edition R14", "versions": [{"status": "affected", "version": "0", "lessThan": "2.32.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware m15 R3", "versions": [{"status": "affected", "version": "0", "lessThan": "1.37.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware m15 R4", "versions": [{"status": "affected", "version": "0", "lessThan": "1.35.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware m17 R3", "versions": [{"status": "affected", "version": "0", "lessThan": "1.37.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware m17 R4", "versions": [{"status": "affected", "version": "0", "lessThan": "1.35.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware x15 R1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.34.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Alienware x17 R1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.34.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "AURORA R16", "versions": [{"status": "affected", "version": "0", "lessThan": "2.25.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Inspiron 15 3510", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Inspiron 15 3521", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "XPS 8950", "versions": [{"status": "affected", "version": "0", "lessThan": "1.33.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "XPS 8960", "versions": [{"status": "affected", "version": "0", "lessThan": "2.24.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write"}]}], "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.6, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Dell Technologies would like to thank falconCorrup for reporting this issue.", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Alienware Area 51m R2", "vendor": "Dell", "versions": [{"lessThan": "1.37.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware Area-51 AAT2265", "vendor": "Dell", "versions": [{"lessThan": "1.8.1", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware Aurora R13", "vendor": "Dell", "versions": [{"lessThan": "1.33.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware Aurora R15", "vendor": "Dell", "versions": [{"lessThan": "1.29.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware Aurora R15 AMD", "vendor": "Dell", "versions": [{"lessThan": "1.26.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware Aurora Ryzen Edition R14", "vendor": "Dell", "versions": [{"lessThan": "2.32.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware m15 R3", "vendor": "Dell", "versions": [{"lessThan": "1.37.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware m15 R4", "vendor": "Dell", "versions": [{"lessThan": "1.35.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware m17 R3", "vendor": "Dell", "versions": [{"lessThan": "1.37.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware m17 R4", "vendor": "Dell", "versions": [{"lessThan": "1.35.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware x15 R1", "vendor": "Dell", "versions": [{"lessThan": "1.34.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Alienware x17 R1", "vendor": "Dell", "versions": [{"lessThan": "1.34.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "AURORA R16", "vendor": "Dell", "versions": [{"lessThan": "2.25.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Inspiron 15 3510", "vendor": "Dell", "versions": [{"lessThan": "1.30.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Inspiron 15 3521", "vendor": "Dell", "versions": [{"lessThan": "1.25.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "XPS 8950", "vendor": "Dell", "versions": [{"lessThan": "1.33.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "XPS 8960", "vendor": "Dell", "versions": [{"lessThan": "2.24.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security_alert@emc.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write"}], "id": "CVE-2026-63693", "lastModified": "2026-08-24T20:16:55.677", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 5.2, "source": "security_alert@emc.com", "type": "Secondary"}]}, "published": "2026-08-24T20:16:55.677", "references": [{"source": "security_alert@emc.com", "url": "https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-379"}], "source": "security_alert@emc.com", "type": "Primary"}]}