CVE-2026-40717
Received Received - Intake

Dell Monitor Driver Link Following Local Privilege Escalation

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: Dell

Description
Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-40717
EUVD
EUVD-2026-52396

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell monitor_driver 1.0.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Link Resolution Before File Access issue, also known as Link Following. It exists in the Dell Monitor driver version 1.0.0.0. An attacker with low privileges and local access could exploit this to gain higher system privileges.

Detection Guidance

This vulnerability involves improper link resolution in the Dell Monitor driver. To detect it, check for the presence of the vulnerable driver version 1.0.0.0 on your system. Use commands like 'driverquery' on Windows to list installed drivers and verify if 'dell monitor_driver' version 1.0.0.0 is installed.

Impact Analysis

If exploited, this vulnerability could allow an attacker to elevate their privileges on your system. This means they might gain access to restricted data or perform actions requiring higher permissions than they should have.

Compliance Impact

This vulnerability allows local attackers to elevate privileges by exploiting improper link resolution. While not directly impacting GDPR or HIPAA, it could indirectly affect compliance by enabling unauthorized access to sensitive data if exploited on systems handling regulated information.

Mitigation Strategies

Update the Dell Monitor driver to the latest version provided by Dell to address the Link Following vulnerability. Ensure proper access controls are in place to limit local access to authorized users only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-40717. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart