CVE-2026-34883
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low-privileged user to escalate privileges to Administrator. During installation, the software writes the file CCFLFamily_07Feb11.edr to C:\ProgramData\Portrait Displays\CW\data\i1D3\ while running with elevated privileges. Because the installer does not properly validate symbolic links or reparse points at the destination path, an attacker can create a malicious link that redirects the write operation to an arbitrary system location, enabling arbitrary file creation or overwrite with elevated privileges.
Risk Assessment
The risk is the possibility of privilege escalation by a local user to Administrator level, which can lead to full compromise of the Windows system.
Recommendation
It is recommended to update the Portrait Dell Color Management application to version 3.7.0 or later, which contains a fix for this vulnerability.
Other vulnerabilities in Portrait Dell Color Management
See all- CVE-2025-53919High
The Portrait Dell Color Management application through 3.3.008 for Dell monitors creates a temporary folder with weak permissions during installation and uninstallation. A low-privileged attacker with local access could exploit this to elevate privileges.
- CVE-2025-53398High
The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions, which may allow unauthorized access to application resources.
Original NVD description (English source)
An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low-privileged user to escalate privileges to Administrator. During installation, the software writes the file CCFLFamily_07Feb11.edr to C:\ProgramData\Portrait Displays\CW\data\i1D3\ while running with elevated privileges. Because the installer does not properly validate symbolic links or reparse points at the destination path, an attacker can create a malicious link that redirects the write operation to an arbitrary system location, enabling arbitrary file creation or overwrite with elevated privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS