CVE-2021-36276: Dell DBUTILDRV2.SYS Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

Affected products

• Dell DBUTILDRV2.SYS Firmware: version 2.5 only; version 2.6 only

Published 2021-08-09. Last modified 2026-06-17.