Dell Supportassist For Home Pcs vulnerabilities, page 2

26 vulnerabilities

Known vulnerabilities in Dell Supportassist For Home Pcs, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2019-12280dellsupportassist_for_business_pcs+2
EPSS score
2.23%
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.7.8CVE-2019-3735delldell supportassist for business pcs+3
EPSS score
0.26%
Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 contain an Improper Privilege Management Vulnerability. A malicious local user can exploit this vulnerability by inheriting a system thread using a leaked thread handle to gain system privileges on the affected machine.7.8CVE-2023-48670dellsupportassist_client_consumer+1
EPSS score
0.24%
Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated privileges.6.3CVE-2023-39249dellsupportassist_client_consumer+1
EPSS score
0.32%
Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables IT/System Administrators to perform driver scans and Dell-recommended driver installations without requiring them to log out of the local non-admin user session. However, the granted privilege is limited solely to the SupportAssist User Interface and automatically expires after 15 minutes.7.2CVE-2023-25535dellsupportassist_client_consumer+1
EPSS score
0.20%
Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 20237.8CVE-2023-44283dellsupportassist_for_business_pcs+1
EPSS score
0.24%
In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.