CVE Intelligence

Vulnerabilidades de Dell

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Dell: 614 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-43993 Alta · 7.8 CWE-428 25/09/2025
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions…
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
CVE-2025-43943 Média · 6.7 CWE-78 25/09/2025
OS Command Injection em Dell Cloud Disaster Recovery
Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVE-2025-26333 Alta · 7.5 CWE-209 25/09/2025
Information Exposure Through an Error Message em Dell Bsafe Crypto-j
Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure.
CVE-2025-36601 Alta · 7.5 CWE-200 25/09/2025
Exposure of Sensitive Information em Dell Powerscale Onefs
Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2023-43086 Alta · 7.8 CWE-284 23/11/2023
Improper Access Control em Dell Command|configure
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation.
CVE-2021-36343 Média · 6.4 CWE-20 24/01/2022
Improper Input Validation em Dell Precision 5820 Tower Firmware
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36342 Média · 6.4 CWE-20 24/01/2022
Improper Input Validation em Dell Precision 7510 Firmware
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36325 Média · 6.7 CWE-20 12/11/2021
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36324 Média · 6.7 CWE-20 12/11/2021
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36323 Média · 6.7 CWE-20 12/11/2021
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-21551 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-782 04/05/2021
Dell dbutil Driver Insufficient Access Control Vulnerability
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
CVE-2020-11899 Média · 5.4 KEV Alta · 53 CWE-125 17/06/2020
Treck TCP/IP stack Out-of-Bounds Read Vulnerability
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
CVE-2019-3740 Média · 6.5 CWE-203 18/09/2019
Observable Discrepancy em Dell Bsafe Cert-j
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.
CVE-2019-3739 Média · 6.5 CWE-310 18/09/2019
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure…
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.