CVE-2022-34459
https://notcve.org/view.php?id=CVE-2022-34459
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution. • https://www.dell.com/support/kbdoc/en-us/000204950/dsa-2022-298 • CWE-347: Improper Verification of Cryptographic Signature •
CVE-2022-34382
https://notcve.org/view.php?id=CVE-2022-34382
Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability in order to elevate their privileges. Dell Command Update, Dell Update y Alienware Update versiones anteriores a 4.6.0, contienen una vulnerabilidad de escalada de privilegios local en la configuración del catálogo personalizado. Un usuario local malicioso puede explotar potencialmente esta vulnerabilidad para elevar sus privilegios • https://www.dell.com/support/kbdoc/000202198 •
CVE-2022-24426
https://notcve.org/view.php?id=CVE-2022-24426
Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation. La versión 4.4.0 de Dell Command | Update, Dell Update y Alienware Update contiene una vulnerabilidad de escalada de privilegios local en el componente Advanced Driver Restore. Un usuario local malintencionado podría explotar esta vulnerabilidad, llevando a una escalada de privilegios. • https://www.dell.com/support/kbdoc/en-us/000197723/dsa-2022-074 • CWE-427: Uncontrolled Search Path Element •