Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in G7 7500 Firmware · all components

TI-2022-10104 CVE-2022-26860 · GHSA-qxc9-cxmm-778r

Stack-based buffer overflow in Dell CPG BIOS

Priority LOW 35

Dell BIOS versions contain a stack-based buffer overflow vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00195 Published 2022-09-06 Fixed in All CWE-121
Priority LOW 33

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00173 Published 2024-08-28 Fixed in 1.27.0, 1.22.0 +82 CWE-59
TI-2022-10102 CVE-2022-26858 · GHSA-r95r-f5pv-5rr9

Improper authentication in Dell CPG BIOS

Priority LOW 33

Dell BIOS versions contain an Improper Authentication vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00173 Published 2022-09-06 Fixed in All CWE-287
Priority LOW 33

Dell BIOSConnect feature contains a buffer overflow vulnerability.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00287 Published 2021-06-24 Fixed in Gen 11, Gen 10 CWE-121
Priority LOW 33

Dell BIOSConnect feature contains a buffer overflow vulnerability.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00279 Published 2021-06-24 Fixed in Gen 11, Gen 10 CWE-121
TI-2024-00148 CVE-2024-0160 · GHSA-47wc-gh7x-58g7

Incorrect authorization in Dell CPG BIOS

Priority LOW 32

Dell Client Platform contains an incorrect authorization vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00249 Published 2024-06-12 Fixed in 1.32.0 CWE-863
Priority LOW 32

Dell BIOSConnect feature contains a buffer overflow vulnerability.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00263 Published 2021-06-24 Fixed in Gen 11, Gen 10 CWE-122
Priority LOW 30

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00539 Published 2021-06-24 No fix listed CWE-295
TI-2024-00146 CVE-2024-0158 · GHSA-w975-rg3f-5xr9

Improper input validation in Dell CPG BIOS

Priority LOW 29

Dell BIOS contains an improper input validation vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00147 Published 2024-07-02 Fixed in 1.28.0, 1.23.0 +66 CWE-20
Priority LOW 22

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability.

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00138 Published 2022-02-09 Fixed in 1.15 CWE-345
TI-2024-19161 CVE-2024-28970 · GHSA-vv56-76v6-h4r6

Out-of-bounds write in Dell CPG BIOS

Priority LOW 21

Dell Client BIOS contains an Out-of-bounds Write vulnerability.

CVSS 3.1MEDIUM 4.7 Local High privileges No interaction EPSS 0.00137 Published 2024-06-12 Fixed in 1.32.0, 1.6.0 +4 CWE-787
TI-2024-15017 CVE-2024-22448 · GHSA-rc3h-x674-fmwq

Out-of-bounds write in Dell CPG BIOS

Priority LOW 21

Dell BIOS contains an Out-of-Bounds Write vulnerability.

CVSS 3.1MEDIUM 4.7 Local High privileges No interaction EPSS 0.00176 Published 2024-04-10 Fixed in 1.29.0, 1.16.0 +20 CWE-787
Open these records in search →