CVE-2026-40717 — MEDIUM (6.6)

Vulnerability Description

Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Dell	Monitor Driver	1.0.0.0
Dell	Aw2526Hl	-
Dell	Aw2725Dm	-
Dell	Aw2726Dl	-
Dell	Aw2726Dm	-
Dell	Aw3225Dm	-
Dell	Aw3425Dwm	-
Dell	E2722H	-
Dell	E2722Hs	-
Dell	E2723H	-
Dell	E2723Hn	-
Dell	E2724Hs	-
Dell	E2725H	-
Dell	E2725Hm	-
Dell	G2724D	-
Dell	P1917S	-
Dell	P2421D	-
Dell	P2421Dc	-
Dell	P2425D	-
Dell	P2425De	-

Related Weaknesses (CWE)

CWE-59

References

https://www.dell.com/support/kbdoc/en-us/000481265/dsa-2026-295Vendor Advisory

FAQ

What is CVE-2026-40717?

CVE-2026-40717 is a vulnerability with a CVSS score of 6.6 (MEDIUM). Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit th...

How severe is CVE-2026-40717?

CVE-2026-40717 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-40717?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Monitor Driver, Dell Aw2526Hl, Dell Aw2725Dm, Dell Aw2726Dl, Dell Aw2726Dm.