Dell Optiplex 7090 Tower vulnerabilities
15 vulnerabilities
Known vulnerabilities in Dell Optiplex 7090 Tower, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-21574dellalienware_m15_r6_firmware+128
EPSS score0.29%
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.CVE-2021-21572dellalienware_m15_r6_firmware+128EPSS score0.26%
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.CVE-2021-21573dellalienware_m15_r6_firmware+128EPSS score0.28%
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.CVE-2021-21571dellalienware_m15_r6_firmware+128EPSS score0.54%
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.CVE-2021-36343dellalienware_13_r3_firmware+411EPSS score0.24%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2021-36342dellalienware_13_r3_firmware+411EPSS score0.25%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.CVE-2025-29988dell14_plus_2-in-1_db04250_firmware+261EPSS score0.17%
Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.CVE-2022-34403dellalienware_m15_r6_firmware+83EPSS score0.17%
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.CVE-2022-34400dellalienware_m15_r6_firmware+83EPSS score0.21%
Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM.CVE-2024-52541dellalienware_m15_r6_firmware+392EPSS score0.17%
Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.CVE-2024-0158dellalienware_m15_r6_firmware+388EPSS score0.15%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privilegesCVE-2024-22448dellalienware_m15_r6_firmware+268EPSS score0.18%
Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.CVE-2026-35159dell14_plus_2-in-1_db04250_firmware+229EPSS score0.21%
Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.CVE-2023-48674dellcpg bios+173EPSS score0.49%
Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.CVE-2023-43078dellalienware_m15_r6_firmware+346EPSS score0.17%
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.