CVE-2025-53919
Weak Permissions in Portrait Dell Color Management Enables Privilege Escalation
Publication date: 2025-12-17
Last updated on: 2025-12-17
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dell | portrait_color_management | 3.3.008 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-276 | During installation, installed file permissions are set to allow anyone to modify those files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Portrait Dell Color Management application (version through 3.3.008) for Dell monitors. During installation and uninstallation, the application creates a temporary folder with weak permissions. A low-privileged attacker who has local access to the system could exploit these weak permissions to gain elevated privileges.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow a low-privileged local attacker to escalate their privileges on the affected system. This means the attacker could gain higher-level access than intended, potentially leading to unauthorized actions or control over the system.