CVE-2025-43991 — Dell / SupportAssist for Home PCs

Description (CNA)

SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link (Symlink) following vulnerability. A low privileged attacker with local access to the system could potentially exploit this vulnerability to delete arbitrary files only in that affected system.

Affected (CNA)

Vendor / product	Versions
Dell / SupportAssist for Home PCs	affected N/A before 4.10.1
Dell / SupportAssist for Business PCs	affected N/A before 4.9.0

CWE

CWE-61

References

https://www.dell.com/support/kbdoc/en-us/000378367/dsa-2025-362-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.