CVE-2026-63693

State: Published
Severity: 6.6 Medium
Published: Aug 24, 2026
Updated: Aug 27, 2026
Reserved: Jul 17, 2026

Description

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H	dell

Weaknesses

CWE-379 Creation of Temporary File in Directory with Insecure Permissions

Affected Products

Product	Versions
Alienware Area 51m R2Dell	before 1.37.0Affected
Alienware Area-51 AAT2265Dell	before 1.8.1Affected
Alienware Aurora R13Dell	before 1.33.0Affected
Alienware Aurora R15Dell	before 1.29.0Affected
Alienware Aurora R15 AMDDell	before 1.26.0Affected
Alienware Aurora Ryzen Edition R14Dell	before 2.32.0Affected
Alienware m15 R3Dell	before 1.37.0Affected
Alienware m15 R4Dell	before 1.35.0Affected
Alienware m17 R3Dell	before 1.37.0Affected
Alienware m17 R4Dell	before 1.35.0Affected
Alienware x15 R1Dell	before 1.34.0Affected
Alienware x17 R1Dell	before 1.34.0Affected
AURORA R16Dell	before 2.25.0Affected
Inspiron 15 3510Dell	before 1.30.0Affected
Inspiron 15 3521Dell	before 1.25.0Affected
XPS 8950Dell	before 1.33.0Affected
XPS 8960Dell	before 2.24.0Affected

References

https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.