{"id":"CVE-2026-63693","state":"PUBLISHED","title":"Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit thi","description":"Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write","publishedAt":"2026-08-24T19:40:03.175Z","updatedAt":"2026-08-27T14:36:28.474Z","severity":{"score":6.6,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","source":"dell"},"assigner":"dell","products":["Dell Alienware Area 51m R2","Dell Alienware Area-51 AAT2265","Dell Alienware Aurora R13","Dell Alienware Aurora R15","Dell Alienware Aurora R15 AMD","Dell Alienware Aurora Ryzen Edition R14","Dell Alienware m15 R3","Dell Alienware m15 R4","Dell Alienware m17 R3","Dell Alienware m17 R4","Dell Alienware x15 R1","Dell Alienware x17 R1","Dell AURORA R16","Dell Inspiron 15 3510","Dell Inspiron 15 3521","Dell XPS 8950","Dell XPS 8960"],"affected":[{"vendor":"Dell","product":"Alienware Area 51m R2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.37.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Area-51 AAT2265","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.8.1","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora R13","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.33.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora R15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.29.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora R15 AMD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.26.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora Ryzen Edition R14","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.32.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m15 R3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.37.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m15 R4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.35.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m17 R3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.37.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m17 R4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.35.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware x15 R1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.34.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware x17 R1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.34.0","versionType":"semver"}]},{"vendor":"Dell","product":"AURORA R16","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.25.0","versionType":"semver"}]},{"vendor":"Dell","product":"Inspiron 15 3510","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.30.0","versionType":"semver"}]},{"vendor":"Dell","product":"Inspiron 15 3521","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.25.0","versionType":"semver"}]},{"vendor":"Dell","product":"XPS 8950","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.33.0","versionType":"semver"}]},{"vendor":"Dell","product":"XPS 8960","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.24.0","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability"],"weaknesses":["CWE-379"],"ingestedAt":"2026-10-29T20:12:41.951Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/63xxx/CVE-2026-63693.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-63693","state":"PUBLISHED","datePublished":"2026-08-24T19:40:03.175Z","dateUpdated":"2026-08-27T14:36:28.474Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-07-17T17:05:09.170Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write"}],"affected":[{"vendor":"Dell","product":"Alienware Area 51m R2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.37.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Area-51 AAT2265","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.8.1","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora R13","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.33.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora R15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.29.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora R15 AMD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.26.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware Aurora Ryzen Edition R14","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.32.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m15 R3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.37.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m15 R4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.35.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m17 R3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.37.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware m17 R4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.35.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware x15 R1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.34.0","versionType":"semver"}]},{"vendor":"Dell","product":"Alienware x17 R1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.34.0","versionType":"semver"}]},{"vendor":"Dell","product":"AURORA R16","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.25.0","versionType":"semver"}]},{"vendor":"Dell","product":"Inspiron 15 3510","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.30.0","versionType":"semver"}]},{"vendor":"Dell","product":"Inspiron 15 3521","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.25.0","versionType":"semver"}]},{"vendor":"Dell","product":"XPS 8950","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.33.0","versionType":"semver"}]},{"vendor":"Dell","product":"XPS 8960","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.24.0","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":6.6,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-379","lang":"en","description":"CWE-379: Creation of Temporary File in Directory with Insecure Permissions","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-08-24T19:40:03.175Z"},"datePublic":"2026-08-24T19:29:00.000Z","credits":[{"lang":"en","value":"Dell Technologies would like to thank falconCorrup for reporting this issue.","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.4"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-27T14:27:09.946669Z","id":"CVE-2026-63693","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-27T14:36:28.474Z"}}]}}}