CVE-2024-0155 is a high severity (CVSS 7.0) use after free in Dell Digital Delivery versions before 5.2.0.0. A local, low privileged attacker could crash the application or run arbitrary code. Dell fixed it in version 5.2.0.0, and its advisory lists no workaround.
What's affected
Dell advisory DSA-2024-033 lists Dell Digital Delivery versions prior to 5.2.0.0 as affected. The fixed version is 5.2.0.0 or later. Dell rates the impact High and lists no workarounds.
Dell Digital Delivery is a Windows application that ships preinstalled on many Dell PCs and delivers software that came with the machine. That makes it widespread on managed fleets even where nobody chose to install it.
How to check if you're exposed
Check the installed version in Windows Settings under installed apps, or query it with PowerShell.
Get-Package -Name "*Digital Delivery*" | Select-Object Name, Version
If that returns nothing, try the registry based listing from your endpoint tool. Any version below 5.2.0.0 is in range. On a managed fleet, run the query through your software inventory and group by version.
What to do now
- Find Dell machines in your fleet and pull the Digital Delivery version from inventory.
- Update to 5.2.0.0 or later through Dell or your own patch tooling.
- If you do not use Digital Delivery, uninstall it. That removes the exposure.
- Check that a standard user cannot install or update the app outside your control.
Why it matters
The record classes this as CWE-416, use after free. The program frees a block of memory and later uses it again. If an attacker can shape what sits in that memory in between, they can steer the program. Dell says the outcomes are an application crash or arbitrary code execution.
The CVSS vector is local with high attack complexity and low privileges, which explains the 7.0. It is not a remote bug. It matters mostly as a step toward privilege escalation on a laptop an attacker already has a foothold on. The record does not flag exploitation in the wild. Safeguard has a free in-browser dependency scan at gold.safeguard.sh/scan, and the Gold directory lists the CVE and CWE pages used here.
Quick check
Is there a workaround?
Dell lists none. Update to 5.2.0.0 or remove the application.
Is this remotely exploitable?
No. Dell describes a local, low privileged attacker.
Sources
Last reviewed: 19 October 2026.
