CVE-2019-3726

CVE-2019-3726 describes an Uncontrolled Search Path Vulnerability affecting Dell Update Package (DUP) Framework versions used in Dell EMC Servers and Client Platforms. A low-privilege, locally authenticated attacker could exploit this by tricking an administrator into running a trusted DUP binary, leading to the loading of a malicious DLL and arbitrary code execution. Rated Medium severity with a CVSS score of 6.7, exploitation requires administrator interaction and has high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion.