This issue affects all Windows operating systems with a supported revision of the BIOS (starting with version 1.0) and is addressed in the latest Dell BIOS releases. To be protected against this vulnerability, upgrade to the latest BIOS version. A patch has been released by Dell, which can be installed via the Dell update utility or manually downloaded from the Dell website.
Collaborative Software
A vulnerability has been identified within Dell's Collaborative Application. A local authenticated malicious user may potentially exploit this vulnerability by installing a malicious software package.

Dell has released a patch to address this vulnerability. The patch can be downloaded from the Dell website.

Microsoft Windows
A vulnerability has been identified within Microsoft Windows which may allow a local authenticated malicious user to potentially escalate privileges within the operating system.
A local authenticated malicious user may potentially exploit this vulnerability by creating a malicious software package.
Microsoft has released a patch addressing this vulnerability. The patch can be downloaded from the Microsoft website.

A vulnerability has been identified within Microsoft Windows which may allow a local authenticated malicious user to potentially escalate privileges within the operating system.
A local authenticated malicious user may potentially exploit this vulnerability by creating a malicious software package.

Mitigation Strategies

To mitigate this vulnerability, use the latest software and firmware updates from the vendors. Ensure that your system is up to date with the most recent software and firmware releases.
Also ensure that you are running a supported operating system (Windows 10) and have not disabled any security features within your operating system environment.

Microsoft Windows Software Requirements

Microsoft has released a patch addressing this vulnerability. The patch can be downloaded from the Microsoft website.

Microsoft Windows Software Requirements
A vulnerability has been identified within Microsoft Windows which may allow a local authenticated malicious user to potentially escalate privileges within the operating system. A local authenticated malicious user may potentially exploit this vulnerability by creating a malicious software package.

Vendor Information Dell

Dell has released a patch to address this vulnerability. The patch can be downloaded from the Dell website.
Microsoft

Microsoft has released a patch addressing this vulnerability. The patch can be downloaded from the Microsoft website.
Collaborative Software
Collaborative Software has released a patch to address this vulnerability. The patch can be downloaded from their website.

Timeline

Published on: 10/11/2022 17:15:00 UTC
Last modified on: 10/14/2022 03:25:00 UTC

References