CVE-2026-111521: High severity vulnerability

Published Nov 11, 2026

Updated

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Dell Display and Peripheral Manager (DDPM Windows) to a version that resolves this vulnerability.
Fixed in 2.4.0.17

Event History

Nov 11, 2026

CVE Published

via MITRE·09:57 PM

Data Sourced

via MITRE·09:57 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations need to be remediated?

Dell Display and Peripheral Manager (DDPM) for Windows versions earlier than 2.4.0.17 are affected. Version 2.4.0.17 is identified as the fixed version.

What access does an attacker need to exploit this issue?

The attacker needs local access and low-privileged access on the affected Windows system. The vulnerability does not require user interaction.

What could successful exploitation allow?

Successful exploitation could lead to code execution. The published vector indicates high potential impact to confidentiality, integrity, and availability.

CVE-2026-111521: High severity vulnerability

Remediation

Event History

Frequently Asked Questions

Which installations need to be remediated?

What access does an attacker need to exploit this issue?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Which installations need to be remediated?

What access does an attacker need to exploit this issue?

What could successful exploitation allow?