Improper Link Resolution Vulnerability in Dell Client BIOS
CVE-2026-63693

6.6MEDIUM

Key Information:

Vendor

Dell
Status
Alienware Area 51m R2
Alienware Area-51 Aat2265
Alienware Aurora R13
Alienware Aurora R15
Vendor
CVE Published:
24 August 2026

What is CVE-2026-63693?

The Dell Client BIOS is affected by a vulnerability where improper link resolution occurs before file access, also known as 'link following.' This flaw allows local attackers with limited privileges to exploit the system, potentially enabling them to write arbitrary data, which could compromise system integrity. Users are advised to apply the latest security updates to mitigate this vulnerability.

Affected Version(s)

Alienware Area 51m R2 0 < 1.37.0

Alienware Area-51 AAT2265 0 < 1.8.1

Alienware Aurora R13 0 < 1.33.0

References

https://www.dell.com/support/kbdoc/en-us/000501826/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell Technologies would like to thank falconCorrup for reporting this issue.
.