Dell Supportassist Os Recovery vulnerabilities
7 vulnerabilities
Known vulnerabilities in Dell Supportassist Os Recovery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-46685dellsupportassist_os_recovery
EPSS score0.11%
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.CVE-2025-46684dellsupportassist_os_recoveryEPSS score0.11%
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.CVE-2025-46602dellsupportassist_os_recoveryEPSS score0.11%
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.CVE-2025-38746dellsupportassist_os_recoveryEPSS score0.18%
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.CVE-2025-38747dellsupportassist_os_recoveryEPSS score0.15%
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to Elevation of Privileges.CVE-2025-22480delldell supportassist os recovery+1EPSS score0.18%
Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges.CVE-2022-26865delldell os recovery tool+1EPSS score0.30%
Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator.