Dell’s FAQ indicates that someone would have to have access to your computer in some way to take advantage of the bug, which they could get through malware, phishing, or being granted remote access privileges. Dell also lists almost 200 affected computers that it considers to be no longer receiving service.īoth Dell and SentinelLabs say that they haven’t seen evidence of the vulnerability being exploited by hackers, despite the fact that it’s been around for so long. If you have a Dell computer, there’s a good chance it could be vulnerable - the list of affected computers on Dell’s website has over 380 models on it, including some of the latest XPS 13 and 15 models, and the G3, G5, and G7 gaming laptops. The vulnerability, found by security research firm SentinelLabs, is present in a driver used by Dell and Alienware’s firmware update utilities, and it allows an attacker to gain full kernel-level permissions in Windows. Dell has released a security patch that fixes a security vulnerability affecting many Dell computers going back to 2009, along with instructions on how to install it if your computer is affected ( via threatpost).