---
id: CVE-2025-53919
title: >-
  An issue was discovered in the Portrait Dell Color Management application
  through 3.3.008 for Dell monitors, It creates a temporary folder, with weak
  permissions, during installation and uninstallation
summary: >-
  An issue was discovered in the Portrait Dell Color Management application
  through 3.3.008 for Dell monitors, It creates a temporary folder, with weak
  permissions, during installation and uninstallation. A low-privileged attacker
  with loc…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-276
vendor: portrait
product: dell_color_management
affected:
  - dell_color_management <= 3.3.008
published: '2025-12-17'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T11:10:00.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-53919'
references:
  - url: 'https://portrait.com/dell'
    label: cve@mitre.org
  - url: 'https://www.portrait.com/dell-security-cve-updates/'
    label: cve@mitre.org
tags:
  - nvd
epss: 0.00113
epssPercentile: 0.01331
ingestedAt: '2026-10-13T11:23:51.117Z'
---

## Overview

An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installation and uninstallation. A low-privileged attacker with local access could potentially exploit this, leading to elevation of privileges.

## Affected

- `dell_color_management <= 3.3.008`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
