CVE-2025-36612 — Dell / SupportAssist for Business PCs

CVE-2025-36612

Dell / SupportAssist for Business PCs PUBLISHED

Description (CNA)

SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

Affected (CNA)

Vendor / product	Versions
Dell / SupportAssist for Business PCs	affected N/A before 4.9.0

CWE

CWE-266

References

https://www.dell.com/support/kbdoc/en-us/000356690/dsa-2025-296-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.