PULSE
ES
FEED
ransomrhysida reclama a Here at Pope and Johnson County Title Company · Financial Servicesransomorova reclama a MARDEC Berhad · MY · Manufacturingransomorova reclama a Hydrogel Vision Corporation · US · Healthcareransomorova reclama a Raffles United Holdings Pte Ltd · SG · Hospitalityransomobsoft reclama a Company #2 · KRransomobsoft reclama a New Victim Company #6ransompixelleaks reclama a Unnamed · ITransompayload reclama a Stahlbau Mann GmbH · DE · Manufacturingransomn0n reclama a Company #122 · USransomn0n reclama a Company #121 · USransomn0n reclama a Company #120 · USransomn0n reclama a Company #119ransomn0n reclama a Company #118 · AEransomnightspire reclama a REFSA S.A. · AR · Otherransomrhysida reclama a Here at Pope and Johnson County Title Company · Financial Servicesransomorova reclama a MARDEC Berhad · MY · Manufacturingransomorova reclama a Hydrogel Vision Corporation · US · Healthcareransomorova reclama a Raffles United Holdings Pte Ltd · SG · Hospitalityransomobsoft reclama a Company #2 · KRransomobsoft reclama a New Victim Company #6ransompixelleaks reclama a Unnamed · ITransompayload reclama a Stahlbau Mann GmbH · DE · Manufacturingransomn0n reclama a Company #122 · USransomn0n reclama a Company #121 · USransomn0n reclama a Company #120 · USransomn0n reclama a Company #119ransomn0n reclama a Company #118 · AEransomnightspire reclama a REFSA S.A. · AR · Other
← All CVEs
CVE WatchOct 13, 2026

CVE-2025-53398

The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,

CVSS

7.8

High

EPSS

0.1%

p2

KEV

—

Exploit Today

1

0-100

Published: Dec 17, 2025 · Last modified: Oct 13, 2026 · CWE-276

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-10-052026-11-02
Technical description

The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-918957.1 HIG
—
——0Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.15hCVE-2026-1070527.5 HIG
29.2%
——9Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.4dCVE-2026-1141487.8 HIG
29.2%
——9Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.4dCVE-2026-1123577.8 HIG
2.5%
——1GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can replace the searchd.exe service binary used by the bundled KOFFIndexingService, which runs as LocalSystem, to execute arbitrary code with NT AUTHORITY\SYSTEM privileges upon the next service start or reboot.5dCVE-2026-1133457.8 HIG
1.8%
——1Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.8dCVE-2026-1139517.8 HIG
23.8%
——7If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.21h