Multiple Vulnerabilities in Dell System Update Could Allow for Remote Code Execution

Multiple vulnerabilities have been discovered in Dell System Update (DSU), the most severe of which could allow for remote code execution. Dell System Update (DSU) is a free Dell utility for Windows that scans your Dell computer and automatically finds, downloads, and installs the latest BIOS, driver, firmware, and application updates for it. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution as root, which may lead to the complete compromise of the vulnerable application and the underlying operating system.

There are currently no reports of these vulnerabilities being exploited in the wild.

Multiple vulnerabilities have been discovered in Dell System Update (DSU), the most severe of which could allow for remote code execution. Details of these vulnerabilities are as follows:

Tactic:Initial Access(TA0001)

Technique:Exploit Public-Facing Application(T1190)

Lower Severity Vulnerabilities Include:

Successful exploitation of the most severe of these vulnerabilities could allow for the complete compromise of the vulnerable application and the underlying operating system.

We recommend the following actions be taken:

Copyright©2026 Center for Internet Security®