Dell Alienware M18 R1 vulnerabilities

7 vulnerabilities

Known vulnerabilities in Dell Alienware M18 R1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.1CVE-2025-36579dellalienware 16 area-51 aa16250+119
EPSS score
0.18%
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.
6.9CVE-2025-29988dell14_plus_2-in-1_db04250_firmware+261
EPSS score
0.17%
Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
8.2CVE-2024-52541dellalienware_m15_r6_firmware+392
EPSS score
0.17%
Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
6.7CVE-2024-0158dellalienware_m15_r6_firmware+388
EPSS score
0.15%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
4.7CVE-2024-22448dellalienware_m15_r6_firmware+268
EPSS score
0.18%
Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
5.3CVE-2026-35159dell14_plus_2-in-1_db04250_firmware+229
EPSS score
0.21%
Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
7.3CVE-2023-43078dellalienware_m15_r6_firmware+346
EPSS score
0.17%
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.