CVE-2025-46691

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Dell PremierColor Panel Driver, versions prior to 1.0.0.1 A01, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
Dell	PremierColor	>= N/A, < 1.0.0.1 A01

References

https://www.dell.com/support/kbdoc/en-us/000394670/dsa-2025-444?lang=enVendor Advisory

Timeline

Published: Jan 28, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-466966.7Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with Unnecessary CVE-2025-466996.5Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vul CVE-2025-46705.4The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scriptin CVE-2025-467017.3Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints CVE-2025-467025.4Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce chann CVE-2025-467036.4Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS)CVE-2025-467044.3A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This CVE-2025-467057.5A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially cra CVE-2025-467067.5When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory r CVE-2025-467075.2Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.CVE-2025-467084.3Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.CVE-2025-467097.5Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception.