Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low-privileged user to escalate privileges to Administrator. During installation, the software writes the file CCFLFamily_07Feb11.edr to C:\ProgramData\Portrait Displays\CW\data\i1D3\ while running with elevated privileges. Because the installer does not properly validate symbolic links or reparse points at the destination path, an attacker can create a malicious link that redirects the write operation to an arbitrary system location, enabling arbitrary file creation or overwrite with elevated privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-19 | 1 | Disclosure1 |
| 2026-05-20 | 1 | General1 |
CVE-2026-34883 An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low… https://www.cve.org/CVERecord?id=CVE-2026-34883
Post summary
The tweet notes CVE‑2026‑34883 as a local symbolic link flaw in Portrait Dell Color Management (pre‑3.7.0) but gives no PoC, exploit, or patch details.
CVE-2026-34883 Symbolic Link Privilege Escalation in Portrait Dell Color Management Before 3.7.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34883
Post summary
The text announces a new privilege escalation vulnerability (CVE-2026-34883) in Portrait Dell Color Management before version 3.7.0, involving symbolic links.