CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
- Record
CVE-2026-63693- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H - Weakness
- CWE-379
- Updated
- 2026-11-02
EUVDEUVD-2026-65091
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
- Record
EUVD-2026-65091- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gc32-24f5-f528
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
- Record
GHSA-gc32-24f5-f528- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H - Weakness
- CWE-379
- Updated
- 2026-11-02
NVD
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
- Record
CVE-2026-63693- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H - Weakness
- CWE-379
- Updated
- 2026-11-02
Affected products
- dell alienware area 51m r2
- dell alienware area-51 aat2265
- dell alienware aurora r13
- dell alienware aurora r15
- dell alienware aurora r15 amd
- dell alienware aurora ryzen edition r14
- dell alienware m15 r3
- dell alienware m15 r4
- dell alienware m17 r3
- dell alienware m17 r4
- dell alienware x15 r1
- dell alienware x17 r1
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-63693 is a medium vulnerability (CVSS 6.6) in Dell Alienware Area 51m R2, published August 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.