CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-31. EPSS: 79.2% chance of exploitation in the next 30 days.

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

Affected products

• Dell Dbutil: up to and including 2.3

Published 2021-05-04. Last modified 2026-06-17.